Analysis
- max time kernel
130s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
23/05/2022, 07:49
General
- Target ac36c5174ef7ba76a704baeaa713ad6630fc79db52bb904a5b41e15316e7d353.exe
- Size 308KB
- Sample220523-jnprkaffdr
- SHA256 ac36c5174ef7ba76a704baeaa713ad6630fc79db52bb904a5b41e15316e7d353
Score
10/10
Malware Config
Extracted
Family
-
azorult
C2
-
http://2.56.59.31/purelogs/index.php
Signatures
- Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ac36c5174ef7ba76a704baeaa713ad6630fc79db52bb904a5b41e15316e7d353.exe"C:\Users\Admin\AppData\Local\Temp\ac36c5174ef7ba76a704baeaa713ad6630fc79db52bb904a5b41e15316e7d353.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1140-130-0x00000000008C8000-0x00000000008DA000-memory.dmp
memory/1140-131-0x0000000000870000-0x000000000088D000-memory.dmp
memory/1140-132-0x0000000000400000-0x00000000004DA000-memory.dmp