azorult | ad7817be4e1f4a6b29eedb318a6963cfcdf1f844b05f94b14ed4be2b83faabea | Triage

Analysis

max time kernel
45s
max time network
49s
platform
windows7_x64
resource
win7-20220715-en
resource tags

arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system
submitted
31-07-2022 07:03

Sharing

Report Analysis Logs

General

Target

ad7817be4e1f4a6b29eedb318a6963cfcdf1f844b05f94b14ed4be2b83faabea.exe
Size

274KB
MD5

e5760c6a41a442d80369a7ce80a56000
SHA1

783e0d2a39bec3f5ad557a221e8ef77c9d02cbd5
SHA256

ad7817be4e1f4a6b29eedb318a6963cfcdf1f844b05f94b14ed4be2b83faabea
SHA512

281181c3d164177f9da29d8d13782b72b91675be2cd058154e8febc402abc5515c66a81b198cf5663e92d9e5eaa7a75e6c87b452a518941e403292dac9ba43b7

Score

10^/10

azorult infostealer trojan

Malware Config

Extracted

Family

azorult

C2

http://gersopakoftaronka.xyz/index.php

Signatures

Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
trojan infostealer azorult

C:\Users\Admin\AppData\Local\Temp\ad7817be4e1f4a6b29eedb318a6963cfcdf1f844b05f94b14ed4be2b83faabea.exe
"C:\Users\Admin\AppData\Local\Temp\ad7817be4e1f4a6b29eedb318a6963cfcdf1f844b05f94b14ed4be2b83faabea.exe"
1⤵
PID:856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/856-54-0x0000000075321000-0x0000000075323000-memory.dmp

Filesize
8KB

Download
memory/856-55-0x000000000135E000-0x000000000136F000-memory.dmp

Filesize
68KB

Download
memory/856-56-0x0000000000400000-0x00000000012CA000-memory.dmp

Filesize
14.8MB

Download