General

  • Target
    04721BFDE5ECE7D75CE90D7D09DDCC71028B26F229038.exe
  • Size 231KB
  • Sample210429-ms8gtp3d4n
  • SHA256 04721bfde5ece7d75ce90d7d09ddcc71028b26f2290382ffb78efcb2c436b2b6
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • azorult

C2
  • http://195.245.112.115/index.php

Targets

    • Target
      04721BFDE5ECE7D75CE90D7D09DDCC71028B26F229038.exe
    • Size 231KB
    • SHA256 04721bfde5ece7d75ce90d7d09ddcc71028b26f2290382ffb78efcb2c436b2b6
    • MD5 SHA1 SHA512
    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks