Analysis

  • max time kernel
    8s
  • max time network
    10s
  • platform
    windows7_x64
  • resource
    win7v20210408
  • submitted
    16-04-2021 12:26

General

  • Target

    559B95AF0D6D2CE56431F2E6219095672E651396322C5.exe

  • Size

    285KB

  • MD5

    bb9ba7da334393812ce8f4e0cc707c51

  • SHA1

    25bfaaaf8ace08267b3de3f67f2330539b00e461

  • SHA256

    559b95af0d6d2ce56431f2e6219095672e651396322c5f6178e36585ece341be

  • SHA512

    6a3dec48baad97051e637dc57be9df27f5e732e924502037126491e13df013a3eae58a2a03a7083b9b10932b16714038b15852e518ccbbfa7995dfd2f4786e41

Malware Config

Signatures

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

Processes

  • C:\Users\Admin\AppData\Local\Temp\559B95AF0D6D2CE56431F2E6219095672E651396322C5.exe
    "C:\Users\Admin\AppData\Local\Temp\559B95AF0D6D2CE56431F2E6219095672E651396322C5.exe"
    1⤵
      PID:1840

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1840-60-0x0000000074D91000-0x0000000074D93000-memory.dmp
      Filesize

      8KB

    • memory/1840-61-0x0000000000400000-0x0000000000453000-memory.dmp
      Filesize

      332KB

    • memory/1840-62-0x0000000000400000-0x0000000000420000-memory.dmp
      Filesize

      128KB