Analysis
-
max time kernel
141s -
max time network
225s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
29-01-2023 18:28
General
-
Target
136f34bf0924e403ad31351a90a26c3d91d86c9d9733ae2c119d1461b3958492.exe
-
Size
194KB
-
MD5
d383a77aed7e0bd1de37b48aca8f01ef
-
SHA1
3607766989599dc1014ee184c21298e8d22e8609
-
SHA256
136f34bf0924e403ad31351a90a26c3d91d86c9d9733ae2c119d1461b3958492
-
SHA512
f313de8e2d7576b7effb85a3fc2f63d3249fccc59471403c9f3c2c6cc831106b4541f93ca617db67acd32d75433b66dd40331375454249537a155055bc10359e
-
SSDEEP
3072:jI26cn0EWph0EdY5cHy2Id1fxO4uYLgGFuEfAduSnlVoJRDqP0WrWO8tS:M2P2ph0A0NLf8yYN0JhqFrWO8U
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://horseliker.ac.ug/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\136f34bf0924e403ad31351a90a26c3d91d86c9d9733ae2c119d1461b3958492.exe"C:\Users\Admin\AppData\Local\Temp\136f34bf0924e403ad31351a90a26c3d91d86c9d9733ae2c119d1461b3958492.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4404 -s 13842⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4404 -ip 44041⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
68KB
-
Filesize
3.3MB