General

  • Target

    5d3f38e9b563156925f9d73c5ba5f2bee3d0f0d0caf077dd65f5be3af5985a89

  • Size

    163KB

  • Sample

    220801-c9dg4afca5

  • MD5

    9a23881abe27dc70ca42597a1e1de354

  • SHA1

    08db04577cf8d58de567c059f58a73b79831f231

  • SHA256

    5d3f38e9b563156925f9d73c5ba5f2bee3d0f0d0caf077dd65f5be3af5985a89

  • SHA512

    511301c0b6817336a747e415b148b08f3781ed74cb8f2a150a0082833c290cf4f2ab6ab834e2007d67d8988dafa4417bc25617634ab1073c8408eacffe48ce41

Malware Config

Extracted

Family

azorult

C2

https://cloudcitytechnologies.com/admin/32/index.php

Targets

    • Target

      5d3f38e9b563156925f9d73c5ba5f2bee3d0f0d0caf077dd65f5be3af5985a89

    • Size

      163KB

    • MD5

      9a23881abe27dc70ca42597a1e1de354

    • SHA1

      08db04577cf8d58de567c059f58a73b79831f231

    • SHA256

      5d3f38e9b563156925f9d73c5ba5f2bee3d0f0d0caf077dd65f5be3af5985a89

    • SHA512

      511301c0b6817336a747e415b148b08f3781ed74cb8f2a150a0082833c290cf4f2ab6ab834e2007d67d8988dafa4417bc25617634ab1073c8408eacffe48ce41

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks