Overview

overview

10

Static

static

146c12a429...0e.exe

windows7_x64

10

146c12a429...0e.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    146c12a429f5a61a92f48c6bb00f03c863a54046858094fd8bf0c14303f4e00e
  • Size 938KB
  • Sample220603-bcp9yscgd8
  • SHA256 146c12a429f5a61a92f48c6bb00f03c863a54046858094fd8bf0c14303f4e00e
  • MD5 SHA1 SHA512
Score
10/10
azorultinfostealerpersistencetrojan

Malware Config

Extracted

Family

  • azorult

C2

  • http://jatkit.ga/x0/index.php

Targets

    • Target
      146c12a429f5a61a92f48c6bb00f03c863a54046858094fd8bf0c14303f4e00e
    • Size 938KB
    • SHA256 146c12a429f5a61a92f48c6bb00f03c863a54046858094fd8bf0c14303f4e00e
    • MD5 SHA1 SHA512
    Score
    10/10
    azorultinfostealerpersistencetrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks