General

  • Target
    1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353
  • Size 201KB
  • Sample220604-mbzmsabce8
  • SHA256 1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • azorult

C2
  • http://darkrebbit.bit/index.php

Targets

    • Target
      1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353
    • Size 201KB
    • SHA256 1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353
    • MD5 SHA1 SHA512
    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Matrix

Tasks