General
-
Target
d1b9a434579f456d75afe539d5b100d21cd57115bdf946c684dd9ec4e02996aa.exe
-
Size
737KB
-
Sample
210407-pxwznk4rkx
-
MD5
56a2f09870771b8312d1a9b10b6446aa
-
SHA1
d1eae9e4ccf62b54f847aaec3e015251663cd06d
-
SHA256
d1b9a434579f456d75afe539d5b100d21cd57115bdf946c684dd9ec4e02996aa
-
SHA512
ad4c2f18b99f8259f2d2f3f9b8156376ea562db091077b9643f7f559d3ca947a32166358d6a973ce6b7116d18450004bc23cd5f18f2995bae1ec2a27b595575c
Static task
static1
Behavioral task
behavioral1
Sample
d1b9a434579f456d75afe539d5b100d21cd57115bdf946c684dd9ec4e02996aa.exe
Resource
win7v20201028
Malware Config
Extracted
azorult
http://alfawood.us/mkdgs/index.php
Targets
-
-
Target
d1b9a434579f456d75afe539d5b100d21cd57115bdf946c684dd9ec4e02996aa.exe
-
Size
737KB
-
MD5
56a2f09870771b8312d1a9b10b6446aa
-
SHA1
d1eae9e4ccf62b54f847aaec3e015251663cd06d
-
SHA256
d1b9a434579f456d75afe539d5b100d21cd57115bdf946c684dd9ec4e02996aa
-
SHA512
ad4c2f18b99f8259f2d2f3f9b8156376ea562db091077b9643f7f559d3ca947a32166358d6a973ce6b7116d18450004bc23cd5f18f2995bae1ec2a27b595575c
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-