General

  • Target

    3f4e286bd3d2a41d6113149d65a9c3983b2ec6bde833d5056874ec9004aa651d

  • Size

    552KB

  • Sample

    220701-cgyybshbg2

  • MD5

    89f45878b6d07e699fb88ba6707e4480

  • SHA1

    39f61ae76f3f59dc6bee4d2c314c82e08357291e

  • SHA256

    3f4e286bd3d2a41d6113149d65a9c3983b2ec6bde833d5056874ec9004aa651d

  • SHA512

    aaabfa65ac25224f9eeffb6b02645dce45c11d68a558900f7969276fb3afa32aac532b3591c9df39eed1d956e47f41b1a15737372191710e446004891b19cb8a

Malware Config

Extracted

Family

azorult

C2

http://195.245.112.115/index.php

Targets

    • Target

      3f4e286bd3d2a41d6113149d65a9c3983b2ec6bde833d5056874ec9004aa651d

    • Size

      552KB

    • MD5

      89f45878b6d07e699fb88ba6707e4480

    • SHA1

      39f61ae76f3f59dc6bee4d2c314c82e08357291e

    • SHA256

      3f4e286bd3d2a41d6113149d65a9c3983b2ec6bde833d5056874ec9004aa651d

    • SHA512

      aaabfa65ac25224f9eeffb6b02645dce45c11d68a558900f7969276fb3afa32aac532b3591c9df39eed1d956e47f41b1a15737372191710e446004891b19cb8a

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks