Analysis
-
max time kernel
78s -
max time network
72s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
30-11-2022 14:07
Static task
static1
Behavioral task
behavioral1
Sample
b5b22c5196c8dd2e5bf98c2f9f76991a4e47b6928293c1d13595fd6b368273cd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b5b22c5196c8dd2e5bf98c2f9f76991a4e47b6928293c1d13595fd6b368273cd.exe
Resource
win10v2004-20220901-en
General
-
Target
b5b22c5196c8dd2e5bf98c2f9f76991a4e47b6928293c1d13595fd6b368273cd.exe
-
Size
279KB
-
MD5
ee98be0e390b545742d741a6ab6e06f2
-
SHA1
b34a13386185a628b4cf5f48ae15b205580a8801
-
SHA256
b5b22c5196c8dd2e5bf98c2f9f76991a4e47b6928293c1d13595fd6b368273cd
-
SHA512
9ff94536a20498874479716f4060a7424a40e0bd44fcc3f1e3de18bac078cab02d7d7be0d2f5ac11bf1b0a9f9cd3ae4e49304e1324ac21c17ef0c6f9b509f11e
-
SSDEEP
6144:bBj57uDaXKm/LI5QPTsw1mMjK48iP2S81svbzHC:37mUpE5Q73HjK+P2S1vn
Malware Config
Extracted
azorult
http://37.46.150.24/azone/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1900-54-0x00000000759F1000-0x00000000759F3000-memory.dmpFilesize
8KB
-
memory/1900-56-0x0000000000220000-0x000000000023D000-memory.dmpFilesize
116KB
-
memory/1900-55-0x000000000095C000-0x000000000096D000-memory.dmpFilesize
68KB
-
memory/1900-57-0x0000000000400000-0x0000000000892000-memory.dmpFilesize
4.6MB
-
memory/1900-58-0x000000000095C000-0x000000000096D000-memory.dmpFilesize
68KB
-
memory/1900-59-0x0000000000400000-0x0000000000892000-memory.dmpFilesize
4.6MB
-
memory/1900-60-0x0000000000400000-0x0000000000892000-memory.dmpFilesize
4.6MB