General
- Target Technical Specifications.exe
- Size 1.2MB
- Sample220104-rb5k9aahfm
- SHA256 f1ca559f0b8eb59d045fbd5d44fbf90d4c179c798691064c3f3fa92b0998be56
- MD5 0bb4a6a1dae34422933d1cc6e373c2ba
- SHA1 1acdfc084109b97a8ef413bc591e2f829f827901
- SHA512 48c844c4f58cb1a6882c3eef598378c5b3543e40206e91df688432a80c0710d003d454303b0a2203a3adaff2efb8b041364e361db439ca4e8bd0223edda4ad95
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Technical Specifications.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Technical Specifications.exe
Resource
win10-en-20211208
0 signatures
0 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://2.58.149.59//index.php
Targets
-
- Target Technical Specifications.exe
- Size 1.2MB
- SHA256 f1ca559f0b8eb59d045fbd5d44fbf90d4c179c798691064c3f3fa92b0998be56
- MD5 0bb4a6a1dae34422933d1cc6e373c2ba
- SHA1 1acdfc084109b97a8ef413bc591e2f829f827901
- SHA512 48c844c4f58cb1a6882c3eef598378c5b3543e40206e91df688432a80c0710d003d454303b0a2203a3adaff2efb8b041364e361db439ca4e8bd0223edda4ad95
- MD5 SHA1 SHA512
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext