General

  • Target

    9d9bd9eb44faae2587eb9feefe820d246cd57c31ed11210ef1cf1a5db09def7b

  • Size

    276KB

  • Sample

    220701-dqbd3ahfem

  • MD5

    da2d998563d6eb38168eaf5b9e9a1ea4

  • SHA1

    5f2ca0f7e54c2cc9f495d54ac5e3e3d2743c0dbb

  • SHA256

    9d9bd9eb44faae2587eb9feefe820d246cd57c31ed11210ef1cf1a5db09def7b

  • SHA512

    5898e1ca855becdaa9343f23dd32eb70e263b2985d0322bf307d9143a0967cfee1665cc0fb67a92bf0de9ac147aaf9e030c5be0d026971dc75430880815ff1d5

Malware Config

Extracted

Family

azorult

C2

https://zamorai.com/under.php

Targets

    • Target

      9d9bd9eb44faae2587eb9feefe820d246cd57c31ed11210ef1cf1a5db09def7b

    • Size

      276KB

    • MD5

      da2d998563d6eb38168eaf5b9e9a1ea4

    • SHA1

      5f2ca0f7e54c2cc9f495d54ac5e3e3d2743c0dbb

    • SHA256

      9d9bd9eb44faae2587eb9feefe820d246cd57c31ed11210ef1cf1a5db09def7b

    • SHA512

      5898e1ca855becdaa9343f23dd32eb70e263b2985d0322bf307d9143a0967cfee1665cc0fb67a92bf0de9ac147aaf9e030c5be0d026971dc75430880815ff1d5

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M6

      suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M6

MITRE ATT&CK Matrix

Tasks