Overview
overview
10Static
static
10keygen-pr.exe
windows7_x64
1keygen-pr.exe
windows10_x64
1keygen-step-1.exe
windows7_x64
10keygen-step-1.exe
windows10_x64
10keygen-step-3.exe
windows7_x64
7keygen-step-3.exe
windows10_x64
1keygen-step-4.exe
windows7_x64
10keygen-step-4.exe
windows10_x64
9keygen.bat
windows7_x64
10keygen.bat
windows10_x64
10Static task
static1
Behavioral task
behavioral1
Sample
keygen-pr.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
keygen-pr.exe
Resource
win10v20201028
Behavioral task
behavioral3
Sample
keygen-step-1.exe
Resource
win7v20201028
Behavioral task
behavioral4
Sample
keygen-step-1.exe
Resource
win10v20201028
Behavioral task
behavioral5
Sample
keygen-step-3.exe
Resource
win7v20201028
Behavioral task
behavioral6
Sample
keygen-step-3.exe
Resource
win10v20201028
Behavioral task
behavioral7
Sample
keygen-step-4.exe
Resource
win7v20201028
Behavioral task
behavioral8
Sample
keygen-step-4.exe
Resource
win10v20201028
General
-
Target
z.rar
-
Size
8.7MB
-
MD5
439e00a52e27f2a9c653cb58031277c3
-
SHA1
3d96d6337c31d0345a85ceae45bebf15d26ea695
-
SHA256
4470d04e7ddfe73366faf06ccbf50904961fe2999f4c8c23be35b820b6036209
-
SHA512
4bc57dbda7e07d3a4b8e957bcdcdb5d5e8dfe7b34a23cb4ead4781423dc5922bc2a8ccf9c8b6b6e2c8689aca6f52fdca67b17ca5c94f236e86cba2cf009a4866
Malware Config
Extracted
azorult
http://kvaka.li/1210776429.php
Signatures
-
Azorult family
Files
-
z.rar.rar
-
keygen-pr.exe.exe windows x86
-
keygen-step-1.exe.exe windows x86
-
keygen-step-3.exe.exe windows x86
-
keygen-step-4.exe.exe windows x86
-
keygen.bat