Overview

overview

10

Static

static

10

1bz7KfahvU.exe

windows7-x64

10

1bz7KfahvU.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    1bz7KfahvU.exe
  • Size 5.4MB
  • Sample230630-pc89qaac94
  • SHA256 24c485ecb00d9d6ed8c12fb7a3162169cb1b666ab9a90eb3c1bcdf8dd8c40df4
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
aurorapersistencestealer

Malware Config

Extracted

Family

  • aurora

C2

  • 167.235.58.189:456

Targets

    • Target
      1bz7KfahvU.exe
    • Size 5.4MB
    • SHA256 24c485ecb00d9d6ed8c12fb7a3162169cb1b666ab9a90eb3c1bcdf8dd8c40df4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    aurorapersistencestealer

    • Aurora

      Aurora is a crypto wallet stealer written in Golang.

      stealeraurora

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks