General

  • Target

    c366d2e91be8589969d0a9ada092f3d1ba5586e2394ce811ba6ce06e00866359.exe

  • Size

    664KB

  • Sample

    220521-yh2aqsgcek

  • MD5

    26a6ae57f34a46a63eb4a01922949e24

  • SHA1

    038fe99edcfd3297d2142102dae3bcafd7c6dad2

  • SHA256

    c366d2e91be8589969d0a9ada092f3d1ba5586e2394ce811ba6ce06e00866359

  • SHA512

    153c700d2b930ef83b75b85ceefe25d7e32d8295b164d9ec832776e0cdca9cc124d8c81084da2bce3761fe57baceda74e177ca7c2a88f7ec865c611dc5ab33b7

Malware Config

Extracted

Family

azorult

C2

http://e4v5sa.xyz/PL341/index.php

Targets

    • Target

      c366d2e91be8589969d0a9ada092f3d1ba5586e2394ce811ba6ce06e00866359.exe

    • Size

      664KB

    • MD5

      26a6ae57f34a46a63eb4a01922949e24

    • SHA1

      038fe99edcfd3297d2142102dae3bcafd7c6dad2

    • SHA256

      c366d2e91be8589969d0a9ada092f3d1ba5586e2394ce811ba6ce06e00866359

    • SHA512

      153c700d2b930ef83b75b85ceefe25d7e32d8295b164d9ec832776e0cdca9cc124d8c81084da2bce3761fe57baceda74e177ca7c2a88f7ec865c611dc5ab33b7

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks