General

  • Target

    61a7437397f79adda8caa34086388072ed81a2239f210333dfb27e0578279a4f

  • Size

    1.2MB

  • Sample

    220730-zatflafhhk

  • MD5

    3b8a6688a9a14737aff1df94d397c6aa

  • SHA1

    fa7218cc046282a733b1071ab83aceb858d5f852

  • SHA256

    61a7437397f79adda8caa34086388072ed81a2239f210333dfb27e0578279a4f

  • SHA512

    c46229f8278ca080d19d48e125397db9eadd5e65a63fefd65589620d4eb697e05b13f7857449cc0a023064b932ae91ebbbf35026ad36dae34601ed3d004cf288

Malware Config

Extracted

Family

azorult

C2

http://195.245.112.115/index.php

Targets

    • Target

      61a7437397f79adda8caa34086388072ed81a2239f210333dfb27e0578279a4f

    • Size

      1.2MB

    • MD5

      3b8a6688a9a14737aff1df94d397c6aa

    • SHA1

      fa7218cc046282a733b1071ab83aceb858d5f852

    • SHA256

      61a7437397f79adda8caa34086388072ed81a2239f210333dfb27e0578279a4f

    • SHA512

      c46229f8278ca080d19d48e125397db9eadd5e65a63fefd65589620d4eb697e05b13f7857449cc0a023064b932ae91ebbbf35026ad36dae34601ed3d004cf288

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks