azorult | 987fad88817c66ad448e334b9bd23d26ef877faef55a0390f4bb68fd6b4c48fa | Triage

Analysis

max time kernel
104s
max time network
97s
platform
windows7_x64
resource
win7-20220414-en
submitted
01-07-2022 05:58

Sharing

Report Analysis Logs

General

Target

987fad88817c66ad448e334b9bd23d26ef877faef55a0390f4bb68fd6b4c48fa.exe
Size

474KB
MD5

9a8cb5ab163096fecec95ea7c744355f
SHA1

6edfdcffc240a446c1e009a93fd608f31841f9aa
SHA256

987fad88817c66ad448e334b9bd23d26ef877faef55a0390f4bb68fd6b4c48fa
SHA512

5dd4e1fcd9da9786b1d9dd4b9f36b2901725e8e1bb371994d4430654516d4f5e3408fa340f147c6c01e7371b065cb5bbfece2448ef7f29ce8272c14b272501ad

Score

10^/10

azorult infostealer trojan

Malware Config

Extracted

Family

azorult

C2

http://85.204.74.152/index.php

Signatures

Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
trojan infostealer azorult

C:\Users\Admin\AppData\Local\Temp\987fad88817c66ad448e334b9bd23d26ef877faef55a0390f4bb68fd6b4c48fa.exe
"C:\Users\Admin\AppData\Local\Temp\987fad88817c66ad448e334b9bd23d26ef877faef55a0390f4bb68fd6b4c48fa.exe"
1⤵
PID:1516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1516-54-0x00000000755A1000-0x00000000755A3000-memory.dmp

Filesize
8KB

Download
memory/1516-55-0x0000000000240000-0x0000000000260000-memory.dmp

Filesize
128KB

Download
memory/1516-59-0x0000000000400000-0x0000000000483000-memory.dmp

Filesize
524KB

Download
memory/1516-60-0x0000000001DD0000-0x0000000001EBC000-memory.dmp

Filesize
944KB

Download