General

  • Target

    fd059cdb330a5b2d2910af9b72bff677def44bafa176e6ffb5e6f4ddff591938

  • Size

    162KB

  • Sample

    220731-kflwdahdcp

  • MD5

    9e8132be3e88de2e1fe2966084cb6a33

  • SHA1

    a92e14a96991fdedfc02e8aff52be3a4b93206f1

  • SHA256

    fd059cdb330a5b2d2910af9b72bff677def44bafa176e6ffb5e6f4ddff591938

  • SHA512

    6fbf39298852b6dce25eed232285e47631e28664fe7f07d929e6546b557512acd21572f1acebfba681565f78e351a70113c6c9d8e01b4913319fdd267479bfbe

Malware Config

Extracted

Family

azorult

C2

http://83286.prohoster.biz/index.php

Targets

    • Target

      fd059cdb330a5b2d2910af9b72bff677def44bafa176e6ffb5e6f4ddff591938

    • Size

      162KB

    • MD5

      9e8132be3e88de2e1fe2966084cb6a33

    • SHA1

      a92e14a96991fdedfc02e8aff52be3a4b93206f1

    • SHA256

      fd059cdb330a5b2d2910af9b72bff677def44bafa176e6ffb5e6f4ddff591938

    • SHA512

      6fbf39298852b6dce25eed232285e47631e28664fe7f07d929e6546b557512acd21572f1acebfba681565f78e351a70113c6c9d8e01b4913319fdd267479bfbe

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks