General

  • Target
    26904B6D1383AFA8EAE8CFCA2176BC5CCE2B97F3C279B.exe
  • Size 215KB
  • Sample211105-nxbcraggfl
  • SHA256 26904b6d1383afa8eae8cfca2176bc5cce2b97f3c279b339ef2f404037e496f9
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • azorult

C2
  • http://admin.svapofit.com/azs/index.php

Targets

    • Target
      26904B6D1383AFA8EAE8CFCA2176BC5CCE2B97F3C279B.exe
    • Size 215KB
    • SHA256 26904b6d1383afa8eae8cfca2176bc5cce2b97f3c279b339ef2f404037e496f9
    • MD5 SHA1 SHA512
    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • suricata: ET MALWARE AZORult Variant.4 Checkin M2

      suricata: ET MALWARE AZORult Variant.4 Checkin M2

    • suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M16

      suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M16

    • suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M4

      suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M4

MITRE ATT&CK Matrix

Tasks