General

  • Target

    bea960ae51836b4d2233c5df014fd0c7fa70bd99456fe247d7c8b4efec36b352.exe

  • Size

    831KB

  • Sample

    210118-z6sz5zjs1x

  • MD5

    a2585ea964bff6f97eb64ecd6db479c1

  • SHA1

    59b07fb7cf8fc6691c7427248218037d8bff7e7e

  • SHA256

    bea960ae51836b4d2233c5df014fd0c7fa70bd99456fe247d7c8b4efec36b352

  • SHA512

    b9ce31b81d6f9e44cdc25d367fa9584f2ba5235a3964370123322375425b4a22bc52331404f4d6bcf31641ae4ee6c50c21f15b2ffa4ee81532bba14d8c2fead3

Malware Config

Extracted

Family

azorult

C2

http://66.228.39.174/index.php

Targets

    • Target

      bea960ae51836b4d2233c5df014fd0c7fa70bd99456fe247d7c8b4efec36b352.exe

    • Size

      831KB

    • MD5

      a2585ea964bff6f97eb64ecd6db479c1

    • SHA1

      59b07fb7cf8fc6691c7427248218037d8bff7e7e

    • SHA256

      bea960ae51836b4d2233c5df014fd0c7fa70bd99456fe247d7c8b4efec36b352

    • SHA512

      b9ce31b81d6f9e44cdc25d367fa9584f2ba5235a3964370123322375425b4a22bc52331404f4d6bcf31641ae4ee6c50c21f15b2ffa4ee81532bba14d8c2fead3

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks