Analysis
- max time kernel
143s - max time network
153s - platform
windows7_x64 - resource
win7-20220414-en - submitted
04/06/2022, 10:18
General
- Target 1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353.exe
- Size 201KB
- Sample220604-mbzmsabce8
- SHA256 1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353
Score
10/10
Malware Config
Extracted
Family
-
azorult
C2
-
http://darkrebbit.bit/index.php
Signatures
- Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
- Unexpected DNS network traffic destination 15 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353.exe"C:\Users\Admin\AppData\Local\Temp\1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/976-54-0x00000000752D1000-0x00000000752D3000-memory.dmp
memory/976-55-0x00000000004CE000-0x00000000004DF000-memory.dmp
memory/976-56-0x0000000000400000-0x0000000000438000-memory.dmp
memory/976-57-0x0000000000400000-0x0000000000438000-memory.dmp