General

  • Target

    546af5248d01e7d2b994944e9dd69ce8de7259515b898f1b8d1f6d811c62b1cc.exe

  • Size

    838KB

  • Sample

    220521-yh2w9sdah6

  • MD5

    d2ae1e4522d1f0f9ffcdee7deaabf63e

  • SHA1

    f7d5c4b258af575c382790859035bccce480ea47

  • SHA256

    546af5248d01e7d2b994944e9dd69ce8de7259515b898f1b8d1f6d811c62b1cc

  • SHA512

    060e48ad2afd605b83e513913405ce4cbd82913f66bfebd7fc8dae723ff78c46a959ab1bb16a1c802b933fc55480d93b36eec1fecacacdec54f64aa8dfbe55bf

Malware Config

Extracted

Family

azorult

C2

http://e4v5sa.xyz/PL341/index.php

Targets

    • Target

      546af5248d01e7d2b994944e9dd69ce8de7259515b898f1b8d1f6d811c62b1cc.exe

    • Size

      838KB

    • MD5

      d2ae1e4522d1f0f9ffcdee7deaabf63e

    • SHA1

      f7d5c4b258af575c382790859035bccce480ea47

    • SHA256

      546af5248d01e7d2b994944e9dd69ce8de7259515b898f1b8d1f6d811c62b1cc

    • SHA512

      060e48ad2afd605b83e513913405ce4cbd82913f66bfebd7fc8dae723ff78c46a959ab1bb16a1c802b933fc55480d93b36eec1fecacacdec54f64aa8dfbe55bf

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks