General

  • Target

    78403b3c4175178c7984db73cc7945d5

  • Size

    319KB

  • Sample

    240126-ymd11aefgn

  • MD5

    78403b3c4175178c7984db73cc7945d5

  • SHA1

    bdffc6c6bd6aff8bb80b411f73d03bde1cd336ed

  • SHA256

    902915735433450152149d1be3053f4a30ad6374199cd3499c2272e58e4f0ce8

  • SHA512

    d78dafbddf77d8cbcbce8e6b6196afa0b65be005381ecd5db8fc91f659bd6b130ab2613e9bb9d2ded66d0c5b692eea28eed6d74d88a218528a7df51630bd5c31

  • SSDEEP

    6144:gxtvJ/xaqBuFUc6ANnxoT9jqjATdz6j+qlYcs4OxM4vbPf4J:gjFxa3t6jT56KRRzv

Malware Config

Extracted

Family

azorult

C2

https://updserv.ga/Panel/index.php

Targets

    • Target

      78403b3c4175178c7984db73cc7945d5

    • Size

      319KB

    • MD5

      78403b3c4175178c7984db73cc7945d5

    • SHA1

      bdffc6c6bd6aff8bb80b411f73d03bde1cd336ed

    • SHA256

      902915735433450152149d1be3053f4a30ad6374199cd3499c2272e58e4f0ce8

    • SHA512

      d78dafbddf77d8cbcbce8e6b6196afa0b65be005381ecd5db8fc91f659bd6b130ab2613e9bb9d2ded66d0c5b692eea28eed6d74d88a218528a7df51630bd5c31

    • SSDEEP

      6144:gxtvJ/xaqBuFUc6ANnxoT9jqjATdz6j+qlYcs4OxM4vbPf4J:gjFxa3t6jT56KRRzv

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks