Overview

overview

10

Static

static

Product Or...st.exe

windows7_x64

10

Product Or...st.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Product Order List.gz
  • Size 503KB
  • Sample210813-de48xk3dbj
  • SHA256 8995dae8e15f5b409b26faff46500b8b2e05882776c01d70c9ea2e2d0cc6e2bc
  • MD5 SHA1 SHA512
Score
10/10
azorultinfostealersuricatatrojan

Malware Config

Extracted

Family

  • azorult

C2

  • http://193.247.144.166/index.php

Targets

    • Target
      Product Order List.exe
    • Size 650KB
    • SHA256 a18751ed6b5abd2fa637e0d4aa4eb794ee98b00e631c0fd2a4f92e9aeeca53e5
    • MD5 SHA1 SHA512
    Score
    10/10
    azorultinfostealersuricatatrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M17

      suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M17

      suricata

    • suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M2

      suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M2

      suricata

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks