General

  • Target

    5bc181664a79d4fafe3c296b1134de920e0dc8b04928b451b5d31f69eb54c06c

  • Size

    641KB

  • Sample

    220801-vak21adfb5

  • MD5

    d4a4687997a425fc4198f35610d4c424

  • SHA1

    ad7412b122c1a59b185a37eebbfb9ceb4d0442ad

  • SHA256

    5bc181664a79d4fafe3c296b1134de920e0dc8b04928b451b5d31f69eb54c06c

  • SHA512

    4b7ebfbcd6aa3cb9e939c89c5c98855fb4b93a641c2e3e2d42b0a98fd24010149e6dab23f406cd8e9e52680bfb648df57c981b00d41b6b08fcb5c2bb1a672eca

Malware Config

Extracted

Family

azorult

C2

http://80.82.69.184/stat.php

Targets

    • Target

      5bc181664a79d4fafe3c296b1134de920e0dc8b04928b451b5d31f69eb54c06c

    • Size

      641KB

    • MD5

      d4a4687997a425fc4198f35610d4c424

    • SHA1

      ad7412b122c1a59b185a37eebbfb9ceb4d0442ad

    • SHA256

      5bc181664a79d4fafe3c296b1134de920e0dc8b04928b451b5d31f69eb54c06c

    • SHA512

      4b7ebfbcd6aa3cb9e939c89c5c98855fb4b93a641c2e3e2d42b0a98fd24010149e6dab23f406cd8e9e52680bfb648df57c981b00d41b6b08fcb5c2bb1a672eca

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks