Overview

overview

10

Static

static

REQUEST FOR QUOTE.exe

windows7_x64

10

REQUEST FOR QUOTE.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    REQUEST FOR QUOTE.exe

  • Size

    403KB

  • Sample

    210712-b7yksqgdnj

  • MD5

    7dd81c7aa77ba5d0b243fd650f98f652

  • SHA1

    c65ac0c448031ccd213b7a3403e8d9258f61ff35

  • SHA256

    9fe0e51e9faabf3d24e8a9e28df633380bd7c8f8d1b9affa92efd5422fb84b4f

  • SHA512

    48d3d09ff221e88b8119de98c48f19c046d53595e49665dd05fbfa50efaef12399255cf53c54885ff38f7b4e77edef0685b1d41b77d8be41185eec543aa5e6b7

Score
10/10
azorultinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://47.251.26.10/index.php

Targets

    • Target

      REQUEST FOR QUOTE.exe

    • Size

      403KB

    • MD5

      7dd81c7aa77ba5d0b243fd650f98f652

    • SHA1

      c65ac0c448031ccd213b7a3403e8d9258f61ff35

    • SHA256

      9fe0e51e9faabf3d24e8a9e28df633380bd7c8f8d1b9affa92efd5422fb84b4f

    • SHA512

      48d3d09ff221e88b8119de98c48f19c046d53595e49665dd05fbfa50efaef12399255cf53c54885ff38f7b4e77edef0685b1d41b77d8be41185eec543aa5e6b7

    Score
    10/10
    azorultinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks