azorult | 59fd177d8ed9ec3a4d49921b01a4735f1570b30fce0ea4da72ba08ab3c71c33f | Triage

Analysis

max time kernel
148s
max time network
144s
platform
windows7_x64
resource
win7-en-20210920
submitted
29-09-2021 13:01

Sharing

Report Analysis Logs

General

Target

view_2021-09-29_07-17.exe
Size

212KB
MD5

930714b080a7c56d7ccd9e079ac46106
SHA1

42bd345cd1e797ea315e6c25fcd3ad60be41e7e8
SHA256

59fd177d8ed9ec3a4d49921b01a4735f1570b30fce0ea4da72ba08ab3c71c33f
SHA512

8b4c272f1a3fb296fc604acf1e3d6e53abcafab9be76d4c73cab586b74d3b6652aaba3cd1ac27448b5070467aae13420b71b8c781cf02a617a00cb0cf97891fd

Score

10^/10

azorult infostealer suricata trojan

Malware Config

Extracted

Family

azorult

C2

http://37.0.8.36/oxxs/index.php

Signatures

Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
trojan infostealer azorult
suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M5
suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M5
suricata

C:\Users\Admin\AppData\Local\Temp\view_2021-09-29_07-17.exe
"C:\Users\Admin\AppData\Local\Temp\view_2021-09-29_07-17.exe"
1⤵
PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1048-53-0x00000000755A1000-0x00000000755A3000-memory.dmp

Filesize
8KB

Download
memory/1048-55-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/1048-54-0x0000000000220000-0x000000000023D000-memory.dmp

Filesize
116KB

Download