Overview

overview

10

Static

static

fd91dbad2d...7a.exe

windows7_x64

10

fd91dbad2d...7a.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd91dbad2d19d5d622b97cb01a25d79748358664a5d26c7a81fd9031ece7777a.exe

  • Size

    823KB

  • Sample

    220514-q5nzxsaag9

  • MD5

    40017083380e6ee7bf6c3c585d52cc3a

  • SHA1

    f8721e36967fc8a3d275d7afdea9c6100af04343

  • SHA256

    fd91dbad2d19d5d622b97cb01a25d79748358664a5d26c7a81fd9031ece7777a

  • SHA512

    fdde3766a4535503e7ff5578424cdb1ecabf408b0c341cf68ffd150dda3bea56ac4102e5d43de8067ee50cf1d603c1bb5218962356afec094c6f5fe466a77cbe

Score
10/10
azorultinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://e4v5sa.xyz/PL341/index.php

Targets

    • Target

      fd91dbad2d19d5d622b97cb01a25d79748358664a5d26c7a81fd9031ece7777a.exe

    • Size

      823KB

    • MD5

      40017083380e6ee7bf6c3c585d52cc3a

    • SHA1

      f8721e36967fc8a3d275d7afdea9c6100af04343

    • SHA256

      fd91dbad2d19d5d622b97cb01a25d79748358664a5d26c7a81fd9031ece7777a

    • SHA512

      fdde3766a4535503e7ff5578424cdb1ecabf408b0c341cf68ffd150dda3bea56ac4102e5d43de8067ee50cf1d603c1bb5218962356afec094c6f5fe466a77cbe

    Score
    10/10
    azorultinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks