General

  • Target

    5331bcca00117bd6624804e227cbb356c4b245e7aa396fbcfe0e17ee9aa4841d

  • Size

    548KB

  • Sample

    220701-ev6ansddh7

  • MD5

    e379c7e2519649cd1e504a9c0773b794

  • SHA1

    0fcc08e975f0d9571a99362679a8d515dd180f98

  • SHA256

    5331bcca00117bd6624804e227cbb356c4b245e7aa396fbcfe0e17ee9aa4841d

  • SHA512

    0d3854d1bf3aeb10615469e5c885e6e53b925ba6557d6ccd5e81674dee3bdb244a86eb768b67f83f96d9114c80ef17989c905954c72b36124cd0fb7e8d175e68

Malware Config

Extracted

Family

azorult

C2

http://kitchenraja.in/benguy/32/index.php

Targets

    • Target

      5331bcca00117bd6624804e227cbb356c4b245e7aa396fbcfe0e17ee9aa4841d

    • Size

      548KB

    • MD5

      e379c7e2519649cd1e504a9c0773b794

    • SHA1

      0fcc08e975f0d9571a99362679a8d515dd180f98

    • SHA256

      5331bcca00117bd6624804e227cbb356c4b245e7aa396fbcfe0e17ee9aa4841d

    • SHA512

      0d3854d1bf3aeb10615469e5c885e6e53b925ba6557d6ccd5e81674dee3bdb244a86eb768b67f83f96d9114c80ef17989c905954c72b36124cd0fb7e8d175e68

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks