azorult | 500b733cbc1ac73598983140ae1b27cb21d06b4e55b5f6d325e5c56b87d8a82f | Triage

Resubmissions

29-09-2021 14:29

210929-rtl7mafcdk 10

29-09-2021 14:25

210929-rre1jafbc3 10

29-09-2021 14:21

210929-rn53jsfbb8 10

Analysis

max time kernel
106s
max time network
109s
platform
windows10_x64
resource
win10v20210408
submitted
29-09-2021 14:21

Sharing

Report Analysis Logs

General

Target

a28f2e84d613b1c2b632352880d530fe.exe
Size

169KB
MD5

a28f2e84d613b1c2b632352880d530fe
SHA1

6c036e2f942b68b7903cc9c00d185306661d9a43
SHA256

500b733cbc1ac73598983140ae1b27cb21d06b4e55b5f6d325e5c56b87d8a82f
SHA512

421f68ea65192dc8a9ba0be64f47b308b8785a641e9d775590b3d764071e13a0b149f7052e785e44d3e44c6396a16fcc725f759adb94b6ffafc117fba0000ae6

Score

10^/10

azorult infostealer trojan

Malware Config

Extracted

Family

azorult

C2

http://37.0.8.36/oxxs/index.php

Signatures

Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
trojan infostealer azorult

C:\Users\Admin\AppData\Local\Temp\a28f2e84d613b1c2b632352880d530fe.exe
"C:\Users\Admin\AppData\Local\Temp\a28f2e84d613b1c2b632352880d530fe.exe"
1⤵
PID:1096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1096-115-0x0000000000400000-0x00000000004B1000-memory.dmp

Filesize
708KB

Download
memory/1096-114-0x0000000000530000-0x000000000067A000-memory.dmp

Filesize
1.3MB

Download