General

  • Target
    263950977bac605cb152d88be7b3115f.exe
  • Size 295KB
  • Sample220412-pvl7xaeeh3
  • SHA256 479a6f9b920dc41930fbfb0dbe7bc6fb34724da607bbbe8775b7be7e3897c688
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • azorult

C2
  • http://195.245.112.115/index.php

Targets

    • Target
      263950977bac605cb152d88be7b3115f.exe
    • Size 295KB
    • SHA256 479a6f9b920dc41930fbfb0dbe7bc6fb34724da607bbbe8775b7be7e3897c688
    • MD5 SHA1 SHA512
    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks