General

  • Target
    SecuriteInfo.com.Trojan.PackedNET.405.4960.10359
  • Size 720KB
  • Sample201201-6smf5exbqa
  • SHA256 f260826b576ab6e2de24d288956fc3e268d113e10b7c19b7c7ee7ba51f82fe43
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • azorult

C2
  • http://52.58.209.130/index.php

Targets

    • Target
      SecuriteInfo.com.Trojan.PackedNET.405.4960.10359
    • Size 720KB
    • SHA256 f260826b576ab6e2de24d288956fc3e268d113e10b7c19b7c7ee7ba51f82fe43
    • MD5 SHA1 SHA512
    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks