General

  • Target

    C&A AW23 Orders Info.exe

  • Size

    309KB

  • Sample

    230513-khkq4aab3v

  • MD5

    8fd6fd774a87b26e6c1fdb440c669768

  • SHA1

    a8dc3390833a6031a2043c9d38722aeee25341b3

  • SHA256

    cb50638ad62a7d2fe8719d31319a698ec91d9b7ffe7498e0ec1d3b36d81dedf3

  • SHA512

    de869b52842629f998e253f043939871f1118f10da04c0edcb8a06e8721cd4a3b1225d813e97234d9fad91647115843c4e90dc36253fa73a4d4829e64390784e

  • SSDEEP

    6144:fDpoe8dhzfwRiQ8RwwDtmFR6y6V1C2SNqFpLa3R:uzIADtmsi2hLw

Malware Config

Extracted

Family

azorult

C2

http://dblg023.shop/PL341/index.php

Targets

    • Target

      C&A AW23 Orders Info.exe

    • Size

      309KB

    • MD5

      8fd6fd774a87b26e6c1fdb440c669768

    • SHA1

      a8dc3390833a6031a2043c9d38722aeee25341b3

    • SHA256

      cb50638ad62a7d2fe8719d31319a698ec91d9b7ffe7498e0ec1d3b36d81dedf3

    • SHA512

      de869b52842629f998e253f043939871f1118f10da04c0edcb8a06e8721cd4a3b1225d813e97234d9fad91647115843c4e90dc36253fa73a4d4829e64390784e

    • SSDEEP

      6144:fDpoe8dhzfwRiQ8RwwDtmFR6y6V1C2SNqFpLa3R:uzIADtmsi2hLw

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks