General

  • Target

    9665993758f1e1b1c83655a8d196c7651f1d143bf59d35e48a66eff7f6be1f53

  • Size

    358KB

  • Sample

    220521-xgy9bafaep

  • MD5

    7222bf84a8554639250b27906fc988cd

  • SHA1

    f7bb6e6199d0c4f49bf134c86e78f2aaa5bb46bb

  • SHA256

    9665993758f1e1b1c83655a8d196c7651f1d143bf59d35e48a66eff7f6be1f53

  • SHA512

    bcd8700d3cd3556efa03f46c9421f06a6cbc3004ba49bb8e0281a73bab11a2d9b501e67c323e5a6da8e2044548f152762b187c7fdf07ab03540f688502115aa8

Malware Config

Targets

    • Target

      PI_#06875654.exe

    • Size

      613KB

    • MD5

      f39696f5a42d2d53c17050bbfcc5154e

    • SHA1

      8f5b5241ffbff92bc59d5801c064b881fbdd69dc

    • SHA256

      5dd9ce8ab0197fc220eaf0aa845f57454a2b88c95deb59acbae8e8945bb25b4f

    • SHA512

      2eee98e43403d6740501dfe479529eb429ec300845691f8c81b38940cfa65d689fba48267abd42ed7f3532646b4f714a0fbba230871cced7fc9b8d6bc67f3f28

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks