General

  • Target

    8b3ef536994910d8fa905b6c1600500e3595f5145eb132a124793cd3fc004cb1

  • Size

    304KB

  • Sample

    220701-esd4eabedr

  • MD5

    2b4d3d0cc6bebdbe400a40c599f732de

  • SHA1

    5715ff737192e07fc75da5cdecf68ba54b67b610

  • SHA256

    8b3ef536994910d8fa905b6c1600500e3595f5145eb132a124793cd3fc004cb1

  • SHA512

    002d318fa0759c35e459c1eeb331c3dfc3db701d9b3d75c37eee0db7c029a2a79add98b06f93bf60e33db53f5ae963b92a6bad77c02339e64d0bbb54e8d71ea2

Malware Config

Extracted

Family

azorult

C2

http://mcjm.ru/petit/index.php

Targets

    • Target

      8b3ef536994910d8fa905b6c1600500e3595f5145eb132a124793cd3fc004cb1

    • Size

      304KB

    • MD5

      2b4d3d0cc6bebdbe400a40c599f732de

    • SHA1

      5715ff737192e07fc75da5cdecf68ba54b67b610

    • SHA256

      8b3ef536994910d8fa905b6c1600500e3595f5145eb132a124793cd3fc004cb1

    • SHA512

      002d318fa0759c35e459c1eeb331c3dfc3db701d9b3d75c37eee0db7c029a2a79add98b06f93bf60e33db53f5ae963b92a6bad77c02339e64d0bbb54e8d71ea2

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks