General
-
Target
bfddf9b66d9ff554b0144c5a7b6ef13c7965ae4f53c6f52a67c5577fff9d9602.exe
-
Size
874KB
-
Sample
210506-h7rlz1tcfn
-
MD5
2a2ea12a3be49a9237c9fcd2094f5ea9
-
SHA1
fe7b3cef50c3db4a768acef0cc03e8e83101fef6
-
SHA256
bfddf9b66d9ff554b0144c5a7b6ef13c7965ae4f53c6f52a67c5577fff9d9602
-
SHA512
9722c4eb20062b324134a863df3ebcb99d11d819052ffebedd45d7e9041414b583aafd07a7454b58d4a3c930319fac288774d9ccd42bb8a9aec619a7e1c5773d
Static task
static1
Behavioral task
behavioral1
Sample
bfddf9b66d9ff554b0144c5a7b6ef13c7965ae4f53c6f52a67c5577fff9d9602.exe
Resource
win7v20210408
Malware Config
Extracted
azorult
http://31.210.20.121/index.php
Targets
-
-
Target
bfddf9b66d9ff554b0144c5a7b6ef13c7965ae4f53c6f52a67c5577fff9d9602.exe
-
Size
874KB
-
MD5
2a2ea12a3be49a9237c9fcd2094f5ea9
-
SHA1
fe7b3cef50c3db4a768acef0cc03e8e83101fef6
-
SHA256
bfddf9b66d9ff554b0144c5a7b6ef13c7965ae4f53c6f52a67c5577fff9d9602
-
SHA512
9722c4eb20062b324134a863df3ebcb99d11d819052ffebedd45d7e9041414b583aafd07a7454b58d4a3c930319fac288774d9ccd42bb8a9aec619a7e1c5773d
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-