General

  • Target

    61b1c2c9d05f495415e285de029b7ca8380f29c6ce43d7aae9633ac80bf00264

  • Size

    848KB

  • Sample

    220730-y6kmwsffhm

  • MD5

    76492cf4fc3ae53aea1b6eaacd262a0d

  • SHA1

    0625807598d4b93b6ba296acc9e4d6ed18cea0e1

  • SHA256

    61b1c2c9d05f495415e285de029b7ca8380f29c6ce43d7aae9633ac80bf00264

  • SHA512

    f2305f9b2374e35c805210342e7a6f96bd17845c50166d7113a11b3b9ce81976a09bbcfd11845a0f8dfd3e1f0f9bfc5195cd6983702d746ac97ecd2e34306b6a

Malware Config

Extracted

Family

azorult

C2

http://91.243.80.91/123/index.php

Targets

    • Target

      61b1c2c9d05f495415e285de029b7ca8380f29c6ce43d7aae9633ac80bf00264

    • Size

      848KB

    • MD5

      76492cf4fc3ae53aea1b6eaacd262a0d

    • SHA1

      0625807598d4b93b6ba296acc9e4d6ed18cea0e1

    • SHA256

      61b1c2c9d05f495415e285de029b7ca8380f29c6ce43d7aae9633ac80bf00264

    • SHA512

      f2305f9b2374e35c805210342e7a6f96bd17845c50166d7113a11b3b9ce81976a09bbcfd11845a0f8dfd3e1f0f9bfc5195cd6983702d746ac97ecd2e34306b6a

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks