General

  • Target

    44a553892af9e23cabd74bef11e9bc8fe08dd0f111a482248f90e8d2f54ae06e.exe

  • Size

    930KB

  • Sample

    210430-5ysa9v29va

  • MD5

    f07c300806da3a9c9a55bc7037db2bb7

  • SHA1

    5b89e3c5706647945eeb5d3d10b7bdf4a60bf264

  • SHA256

    44a553892af9e23cabd74bef11e9bc8fe08dd0f111a482248f90e8d2f54ae06e

  • SHA512

    5b68c7a137c40aa86eccf5bbb5ae526a630fc7a239b81673b9c253998b4b4369b0a0e08784f77d85f3a64c44eb0247ba8771c351a66d59b193501c6aff2fcf9b

Malware Config

Extracted

Family

azorult

C2

http://31.210.20.121/index.php

Targets

    • Target

      44a553892af9e23cabd74bef11e9bc8fe08dd0f111a482248f90e8d2f54ae06e.exe

    • Size

      930KB

    • MD5

      f07c300806da3a9c9a55bc7037db2bb7

    • SHA1

      5b89e3c5706647945eeb5d3d10b7bdf4a60bf264

    • SHA256

      44a553892af9e23cabd74bef11e9bc8fe08dd0f111a482248f90e8d2f54ae06e

    • SHA512

      5b68c7a137c40aa86eccf5bbb5ae526a630fc7a239b81673b9c253998b4b4369b0a0e08784f77d85f3a64c44eb0247ba8771c351a66d59b193501c6aff2fcf9b

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks