General

  • Target
    3f8fda11518ddeef757b86d3cb3e4ec0e6b7ce697949b77e980ea1d7285fc137
  • Size 150KB
  • Sample220520-rx47lsbefr
  • SHA256 3f8fda11518ddeef757b86d3cb3e4ec0e6b7ce697949b77e980ea1d7285fc137
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • azorult

C2
  • http://45.145.185.253/osees/index.php

Targets

    • Target
      bin_2020-08-18_13-38.exe
    • Size 224KB
    • SHA256 e9eb6182c7505ca4d757a8d70e671ccb79fc9baa153407a09712cbe072e3c7ac
    • MD5 SHA1 SHA512
    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • suricata: ET MALWARE AZORult Variant.4 Checkin M2

      suricata: ET MALWARE AZORult Variant.4 Checkin M2

    • suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M6

      suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M6

MITRE ATT&CK Matrix

Tasks