Analysis
-
max time kernel
76s -
max time network
68s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
03-07-2022 09:45
General
-
Target
3bc13b6c499c632b94e2b1fd7d83d4adaf96d3f147b8e0ab302d74bcda9a82b1.exe
-
Size
264KB
-
MD5
6bf4098d9eeb743ffe314362b0d7b52d
-
SHA1
cf5bab29b03e6419d57ad2f55a973757182aa236
-
SHA256
3bc13b6c499c632b94e2b1fd7d83d4adaf96d3f147b8e0ab302d74bcda9a82b1
-
SHA512
36d783f3287ed58b7c0d594dcd614c3651ae39a1b1801e075de6e931184f2f805ad6772a9fd4fe6cc063d4584a0ab68f7aa348fd02e367e71b5eeab4a74b374e
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://195.245.112.115/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3bc13b6c499c632b94e2b1fd7d83d4adaf96d3f147b8e0ab302d74bcda9a82b1.exe"C:\Users\Admin\AppData\Local\Temp\3bc13b6c499c632b94e2b1fd7d83d4adaf96d3f147b8e0ab302d74bcda9a82b1.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/960-54-0x0000000003141000-0x0000000003152000-memory.dmpFilesize
68KB
-
memory/960-55-0x0000000076571000-0x0000000076573000-memory.dmpFilesize
8KB
-
memory/960-56-0x0000000003141000-0x0000000003152000-memory.dmpFilesize
68KB
-
memory/960-57-0x0000000000400000-0x0000000003041000-memory.dmpFilesize
44.3MB
-
memory/960-58-0x0000000000400000-0x0000000003041000-memory.dmpFilesize
44.3MB
-
memory/960-59-0x0000000000400000-0x0000000003041000-memory.dmpFilesize
44.3MB