General

  • Target

    0fb94ab10bd6615dcbbdd5470417d6518463d0de0744266f2fd28ad07220363f.exe

  • Size

    112KB

  • Sample

    220521-yh3hssgcfl

  • MD5

    f68ce7f8421ba806bab614ea7f62e065

  • SHA1

    982909e00790c575d4e0dbda27fcec9ff9dcf41e

  • SHA256

    0fb94ab10bd6615dcbbdd5470417d6518463d0de0744266f2fd28ad07220363f

  • SHA512

    15ac07ea510c972a5a830881a017e929e093955d9be2a0cc12b8ac6a85383175bb855df87aaeaa965c71b3d4e33a25b45f746362cae1d468d1563315153f0cea

Malware Config

Extracted

Family

azorult

C2

http://hansol1.zzz.com.ua/index.php

Targets

    • Target

      0fb94ab10bd6615dcbbdd5470417d6518463d0de0744266f2fd28ad07220363f.exe

    • Size

      112KB

    • MD5

      f68ce7f8421ba806bab614ea7f62e065

    • SHA1

      982909e00790c575d4e0dbda27fcec9ff9dcf41e

    • SHA256

      0fb94ab10bd6615dcbbdd5470417d6518463d0de0744266f2fd28ad07220363f

    • SHA512

      15ac07ea510c972a5a830881a017e929e093955d9be2a0cc12b8ac6a85383175bb855df87aaeaa965c71b3d4e33a25b45f746362cae1d468d1563315153f0cea

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • suricata: ET MALWARE AZORult Variant.4 Checkin M2

      suricata: ET MALWARE AZORult Variant.4 Checkin M2

    • suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M13

      suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M13

    • suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M5

      suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M5

MITRE ATT&CK Matrix

Tasks