General
-
Target
keygen-step-1.exe
-
Size
112KB
-
Sample
211022-r1e2wscfel
-
MD5
c615d0bfa727f494fee9ecb3f0acf563
-
SHA1
6c3509ae64abc299a7afa13552c4fe430071f087
-
SHA256
95d91febc45d03c1ee477c127bcbd332cd6fbce1e91105004af723594e6f0199
-
SHA512
d97256eb93d8e546f5fb5c61bebe61e7dfab316eb7685be83782bd36b28df3f80880e7b823197a4b6bae1af7b9460c4c81357dd44ed199ab93ccaee5acc10e51
Static task
static1
Behavioral task
behavioral1
Sample
keygen-step-1.exe
Resource
win7-ja-20211014
Behavioral task
behavioral2
Sample
keygen-step-1.exe
Resource
win7-en-20210920
Behavioral task
behavioral3
Sample
keygen-step-1.exe
Resource
win7-de-20211014
Behavioral task
behavioral4
Sample
keygen-step-1.exe
Resource
win11
Behavioral task
behavioral5
Sample
keygen-step-1.exe
Resource
win10-ja-20210920
Behavioral task
behavioral6
Sample
keygen-step-1.exe
Resource
win10-en-20210920
Behavioral task
behavioral7
Sample
keygen-step-1.exe
Resource
win10-de-20211014
Malware Config
Extracted
azorult
http://kvaka.li/1210776429.php
Targets
-
-
Target
keygen-step-1.exe
-
Size
112KB
-
MD5
c615d0bfa727f494fee9ecb3f0acf563
-
SHA1
6c3509ae64abc299a7afa13552c4fe430071f087
-
SHA256
95d91febc45d03c1ee477c127bcbd332cd6fbce1e91105004af723594e6f0199
-
SHA512
d97256eb93d8e546f5fb5c61bebe61e7dfab316eb7685be83782bd36b28df3f80880e7b823197a4b6bae1af7b9460c4c81357dd44ed199ab93ccaee5acc10e51
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Registers COM server for autorun
-
suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M15
suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M15
-
suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M18
suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M18
-
suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M5
suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M5
-
suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M6
suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M6
-
Sets service image path in registry
-
Drops file in System32 directory
-