General

  • Target
    Pi Request.zip
  • Size 328KB
  • Sample210823-t1bbl5ep2a
  • SHA256 5f9fa8e86c0738cd9e6ab73272015257d596e9f7048d4fa1e1b57d22816b67b9
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • azorult

C2
  • http://208.167.239.179/index.php

Targets

    • Target
      Pi Request.exe
    • Size 456KB
    • SHA256 0768f66b3f6ee8f9f32520837cee96da8d725c789d82ba16771bbad740b737ee
    • MD5 SHA1 SHA512
    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks