aurora | c533034c68cf9b7b86b79950c132979106d33b05c2fb01f97b31c831c410f40c | Triage

Sharing

General

Target

1c1ca2ed51b39a0eaf5a1f0938c27213.bin.exe
Size

3.8MB
Sample

230306-s1w6vace2y
MD5

1c1ca2ed51b39a0eaf5a1f0938c27213
SHA1

f1398c6185a1e01cab88c9f3d022f6cd43785b8e
SHA256

c533034c68cf9b7b86b79950c132979106d33b05c2fb01f97b31c831c410f40c
SHA512

d7b2b388e2948e2f3e0a2dcf1b098d1e6765ae4d9074eaa8de52da65fc046186087b6426e69a61a6e97aa07662b0918d2ff3bd59214f9d7ceb7d341d6cd4c49a
SSDEEP

49152:e4OuahtPKe0hSRjxv0H0W4Gih7Il3CCJCRhHHcaQlNwQNpJjVRdu:e2rhMj90H27IFCCMNQYQNpvO

Score

10^/10

aurora stealer

Malware Config

Extracted

Family

aurora

C2

82.115.223.135:8081

Targets

- Target
  
  1c1ca2ed51b39a0eaf5a1f0938c27213.bin.exe
- Size
  
  3.8MB
- MD5
  
  1c1ca2ed51b39a0eaf5a1f0938c27213
- SHA1
  
  f1398c6185a1e01cab88c9f3d022f6cd43785b8e
- SHA256
  
  c533034c68cf9b7b86b79950c132979106d33b05c2fb01f97b31c831c410f40c
- SHA512
  
  d7b2b388e2948e2f3e0a2dcf1b098d1e6765ae4d9074eaa8de52da65fc046186087b6426e69a61a6e97aa07662b0918d2ff3bd59214f9d7ceb7d341d6cd4c49a
- SSDEEP
  
  49152:e4OuahtPKe0hSRjxv0H0W4Gih7Il3CCJCRhHHcaQlNwQNpJjVRdu:e2rhMj90H27IFCCMNQYQNpvO
Score

10^/10

aurora stealer
- Aurora
  Aurora is a crypto wallet stealer written in Golang.
  stealer aurora
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2