azorult | 3d9f9aed4cda04e705c9756137c6b05402732e55e69c7d5d12decbaf9001e489 | Triage

Analysis

max time kernel
34s
max time network
40s
platform
windows7_x64
resource
win7-20220414-en
submitted
01-07-2022 15:15

Sharing

Report Analysis Logs

General

Target

3d9f9aed4cda04e705c9756137c6b05402732e55e69c7d5d12decbaf9001e489.exe
Size

217KB
MD5

67973413b8bad55eda9d488da40b6058
SHA1

408079ab6e2e58a01cbd421962517683179d3af3
SHA256

3d9f9aed4cda04e705c9756137c6b05402732e55e69c7d5d12decbaf9001e489
SHA512

707079ce05c523f0995311e421d3ab5838f61896c99bb3bdc148f66b5effd0685f57ffa694f5d61098b253572b46bc81683ffcb8a5388ea6ce329760732f6d5e

Score

10^/10

azorult infostealer trojan

Malware Config

Extracted

Family

azorult

C2

http://login.giocherialaragnatela.it/azs/index.php

Signatures

Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
trojan infostealer azorult

C:\Users\Admin\AppData\Local\Temp\3d9f9aed4cda04e705c9756137c6b05402732e55e69c7d5d12decbaf9001e489.exe
"C:\Users\Admin\AppData\Local\Temp\3d9f9aed4cda04e705c9756137c6b05402732e55e69c7d5d12decbaf9001e489.exe"
1⤵
PID:1620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1620-54-0x0000000075951000-0x0000000075953000-memory.dmp

Filesize
8KB

Download
memory/1620-55-0x0000000000230000-0x0000000000247000-memory.dmp

Filesize
92KB

Download
memory/1620-56-0x0000000000400000-0x000000000044E000-memory.dmp

Filesize
312KB

Download
memory/1620-57-0x0000000000400000-0x000000000044E000-memory.dmp

Filesize
312KB

Download