Overview

overview

10

Static

static

72e1047dc5...b5.exe

windows7_x64

10

72e1047dc5...b5.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72e1047dc517256cd82e774100a7d81b1a35c3449f4eb34f310b770679d430b5.exe

  • Size

    1015KB

  • Sample

    210104-bdkxjt7kgs

  • MD5

    b746d3557ecbb03563eb7ccfe5f76077

  • SHA1

    2c825c0fd2290d305bd04ca6d71f2bd86dcc208f

  • SHA256

    72e1047dc517256cd82e774100a7d81b1a35c3449f4eb34f310b770679d430b5

  • SHA512

    d115f4ec65a7ef85ecbe41f71379ed686bcc5d17d7ba61dce9e145c114c4907839dfd4d0637f03a6e8c7548a9e0e5897fdafc15774ee602c615780e896dfd0b3

Score
10/10
azorultinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://wjnigh.myzen.co.uk/azo2/PL341/index.php

Targets

    • Target

      72e1047dc517256cd82e774100a7d81b1a35c3449f4eb34f310b770679d430b5.exe

    • Size

      1015KB

    • MD5

      b746d3557ecbb03563eb7ccfe5f76077

    • SHA1

      2c825c0fd2290d305bd04ca6d71f2bd86dcc208f

    • SHA256

      72e1047dc517256cd82e774100a7d81b1a35c3449f4eb34f310b770679d430b5

    • SHA512

      d115f4ec65a7ef85ecbe41f71379ed686bcc5d17d7ba61dce9e145c114c4907839dfd4d0637f03a6e8c7548a9e0e5897fdafc15774ee602c615780e896dfd0b3

    Score
    10/10
    azorultinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks