Analysis

  • max time kernel
    17s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    04-03-2021 18:20

General

  • Target

    93c4f857_extracted.exe

  • Size

    112KB

  • MD5

    3d9c9c81c8f8ab2c3925fff9e9e57130

  • SHA1

    abe90b5ef73510cc55a161c69486458ff7bbaa97

  • SHA256

    b562e20331adf2359251dfce8b00fcb3a9153fadc3126b4fa53b28ab61c8df27

  • SHA512

    74e128f9076766f0145c63636b6ddd0e0def637d0dcf25abe964e3ea7407097ad3b8b3aa6cd1ea6ab3c3a51c83559233d61b24e250eeadb37f602fe20bd589ef

Malware Config

Signatures

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

Processes

  • C:\Users\Admin\AppData\Local\Temp\93c4f857_extracted.exe
    "C:\Users\Admin\AppData\Local\Temp\93c4f857_extracted.exe"
    1⤵
      PID:1888

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1888-2-0x0000000075781000-0x0000000075783000-memory.dmp
      Filesize

      8KB

    • memory/2032-3-0x000007FEF6080000-0x000007FEF62FA000-memory.dmp
      Filesize

      2.5MB