Overview

overview

10

Static

static

e87856cc1f...b7.exe

windows7_x64

10

e87856cc1f...b7.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e87856cc1fe76353e5ca3957aa6951f957c6d097407fcc1258ae3d72c8d923b7.exe

  • Size

    246KB

  • Sample

    220514-q5nn6aaag5

  • MD5

    bc6e81255131133a0f8e9ea4cea63d1a

  • SHA1

    c6daa783428bc85f48f5b3d906b56e13d10ec7eb

  • SHA256

    e87856cc1fe76353e5ca3957aa6951f957c6d097407fcc1258ae3d72c8d923b7

  • SHA512

    ee7a61c5a9af70e7970641da0d8ca904c7c5859b6e946cbbfbef9226546ebe6a51f770e25bb554151956dbe51b77fa133961612e92796e5c6b2bce655449b062

Score
10/10
azorultinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://e4v5sa.xyz/PL341/index.php

Targets

    • Target

      e87856cc1fe76353e5ca3957aa6951f957c6d097407fcc1258ae3d72c8d923b7.exe

    • Size

      246KB

    • MD5

      bc6e81255131133a0f8e9ea4cea63d1a

    • SHA1

      c6daa783428bc85f48f5b3d906b56e13d10ec7eb

    • SHA256

      e87856cc1fe76353e5ca3957aa6951f957c6d097407fcc1258ae3d72c8d923b7

    • SHA512

      ee7a61c5a9af70e7970641da0d8ca904c7c5859b6e946cbbfbef9226546ebe6a51f770e25bb554151956dbe51b77fa133961612e92796e5c6b2bce655449b062

    Score
    10/10
    azorultinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks