General

  • Target

    246f89db66ab117828e576a9fe442581

  • Size

    393KB

  • Sample

    231231-cwq62afacp

  • MD5

    246f89db66ab117828e576a9fe442581

  • SHA1

    471112528bc2ed1ca2ed537d623c8b78d8ab77a2

  • SHA256

    6c53427c45a94e1bd8562deca6239474b2cc8c27a30100089bad71c4028dc279

  • SHA512

    021a8f2aac54fc64e30793a78e87cd546b83574aa30db425130058721124107bdac203401da7fe6b8f1eaef30981c73fa3ac59a64dc3e7049605fd4402d6d39f

  • SSDEEP

    6144:XmGIh/WGUaJ8BAKcXixeoDJh0oc1U3t7ZG+35t0OdWaDHVRtw9CoDzn3FF:2TPUAXyeq0oG6TpOODHVRtw93/

Malware Config

Extracted

Family

azorult

C2

http://allitaliya.com/atl/index.php

Targets

    • Target

      246f89db66ab117828e576a9fe442581

    • Size

      393KB

    • MD5

      246f89db66ab117828e576a9fe442581

    • SHA1

      471112528bc2ed1ca2ed537d623c8b78d8ab77a2

    • SHA256

      6c53427c45a94e1bd8562deca6239474b2cc8c27a30100089bad71c4028dc279

    • SHA512

      021a8f2aac54fc64e30793a78e87cd546b83574aa30db425130058721124107bdac203401da7fe6b8f1eaef30981c73fa3ac59a64dc3e7049605fd4402d6d39f

    • SSDEEP

      6144:XmGIh/WGUaJ8BAKcXixeoDJh0oc1U3t7ZG+35t0OdWaDHVRtw9CoDzn3FF:2TPUAXyeq0oG6TpOODHVRtw93/

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks