Analysis
-
max time kernel
14s -
max time network
14s -
platform
windows7_x64 -
resource
win7v20210408 -
submitted
17-04-2021 02:06
Static task
static1
Behavioral task
behavioral1
Sample
723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe
Resource
win10v20210410
General
-
Target
723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe
-
Size
168KB
-
MD5
f68c49a6959e2e612e2429833f3e5c49
-
SHA1
acbeb4a89781b35affdc685090f044c6ae562318
-
SHA256
723d9cc9705952d934ead57091edc2d07cde8a0384381e5f10e89cf994699e31
-
SHA512
66a93b3de0ae89e9b4af626767710906e04052a198569cc65c393a9e9767bd7ed15353abf862084e2f2a0a8fad04f23c01c72b52bea141612d3480efbddad1e9
Malware Config
Extracted
azorult
http://buterin-vitalik.fun/filomena/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of AdjustPrivilegeToken 64 IoCs
Processes:
723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exedescription pid process Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe Token: SeLoadDriverPrivilege 1096 723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe