Overview

overview

10

Static

static

1

66e4907f25...11.exe

windows7_x64

7

66e4907f25...11.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    66e4907f25770f55833861cbb7309a916941c6d5bf9604944f0b84b57c9e9b11.exe

  • Size

    340KB

  • Sample

    210624-27frf5jygx

  • MD5

    a840d9d68a287bb0ee95efd5b1b5f31e

  • SHA1

    4bcb7ec055dc73a6d0c14731c444da9a8def654c

  • SHA256

    66e4907f25770f55833861cbb7309a916941c6d5bf9604944f0b84b57c9e9b11

  • SHA512

    f961f0938a715648bbf1aa0bf1a2ef49dc39557c6dbb700f8ee31e8a27ccdf7098a9ca8241c7c2b423e91193e34f329576a8c6d7a1ff0ded14d8f6d27a9d1d86

Score
10/10
azorultinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://smkn1cilegon.sch.id/huPI/index.php

Targets

    • Target

      66e4907f25770f55833861cbb7309a916941c6d5bf9604944f0b84b57c9e9b11.exe

    • Size

      340KB

    • MD5

      a840d9d68a287bb0ee95efd5b1b5f31e

    • SHA1

      4bcb7ec055dc73a6d0c14731c444da9a8def654c

    • SHA256

      66e4907f25770f55833861cbb7309a916941c6d5bf9604944f0b84b57c9e9b11

    • SHA512

      f961f0938a715648bbf1aa0bf1a2ef49dc39557c6dbb700f8ee31e8a27ccdf7098a9ca8241c7c2b423e91193e34f329576a8c6d7a1ff0ded14d8f6d27a9d1d86

    Score
    10/10
    azorultinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks