General

  • Target

    d9fa63c9f9a1f094d69e3860060986ac9231860df1d98f22b5252f6e13625758

  • Size

    1.1MB

  • Sample

    220701-efjs5aahfr

  • MD5

    90eaf0b480162808352d1fc2c56c0774

  • SHA1

    6ddfe0ab4e910f20444465aa7cbf6d8d9c817bea

  • SHA256

    d9fa63c9f9a1f094d69e3860060986ac9231860df1d98f22b5252f6e13625758

  • SHA512

    f572975760a587c830806278ba28ecf92978b1353478512b2a1a0bfcc3d86de2697f76fe75ac5b0db5ce6a6d9672fdd44e29dc7c549f9d77d25c21603f35d3eb

Malware Config

Extracted

Family

azorult

C2

http://79.124.8.128/index.php

Targets

    • Target

      d9fa63c9f9a1f094d69e3860060986ac9231860df1d98f22b5252f6e13625758

    • Size

      1.1MB

    • MD5

      90eaf0b480162808352d1fc2c56c0774

    • SHA1

      6ddfe0ab4e910f20444465aa7cbf6d8d9c817bea

    • SHA256

      d9fa63c9f9a1f094d69e3860060986ac9231860df1d98f22b5252f6e13625758

    • SHA512

      f572975760a587c830806278ba28ecf92978b1353478512b2a1a0bfcc3d86de2697f76fe75ac5b0db5ce6a6d9672fdd44e29dc7c549f9d77d25c21603f35d3eb

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks