Analysis
-
max time kernel
45s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
21-05-2022 19:47
Static task
static1
Behavioral task
behavioral1
Sample
4a4a4c441355bbf90def9ab2aec89335f93237487e670df04b3d63c65b5be25a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4a4a4c441355bbf90def9ab2aec89335f93237487e670df04b3d63c65b5be25a.exe
Resource
win10v2004-20220414-en
General
-
Target
4a4a4c441355bbf90def9ab2aec89335f93237487e670df04b3d63c65b5be25a.exe
-
Size
270KB
-
MD5
4332f0c0baa163ca13506e81b24b25ea
-
SHA1
f43d4def1288ee50719aad128ee5cdc8b60c256e
-
SHA256
4a4a4c441355bbf90def9ab2aec89335f93237487e670df04b3d63c65b5be25a
-
SHA512
271de625607fb85050d8837cc907ae40735c9dfd0fa266f8eb6252ab3f04c7b9c4b16d39e79b098eda975bba9c362a07439c27b930f750640f4615d290059f12
Malware Config
Extracted
azorult
http://136.144.41.124/razor/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1672-54-0x0000000000268000-0x000000000027A000-memory.dmpFilesize
72KB
-
memory/1672-55-0x00000000763C1000-0x00000000763C3000-memory.dmpFilesize
8KB
-
memory/1672-56-0x0000000000268000-0x000000000027A000-memory.dmpFilesize
72KB
-
memory/1672-57-0x00000000003C0000-0x00000000003DD000-memory.dmpFilesize
116KB
-
memory/1672-58-0x0000000000400000-0x000000000046B000-memory.dmpFilesize
428KB