General

  • Target

    7b7c13961dd5633dbd63837ba08aaed7

  • Size

    720KB

  • Sample

    240127-2qd2ysffdk

  • MD5

    7b7c13961dd5633dbd63837ba08aaed7

  • SHA1

    e6c7f08a005b4f195cf1f0ac024442157dc0e8c0

  • SHA256

    22a117c101443073379635cf75a22acfaa3dcc65c29bde65a3287d177147f2e1

  • SHA512

    0875f202878e0a9a79adf5ea97f310b1b50b562c1bfcd0644164847b32369833df4f1228b9d7c9fb431fa0d9b7915374f2d8c952ca04aa1eaf0ee34ad30b39b5

  • SSDEEP

    12288:XrMBoA6sOVrlU3LcedGUGnTsbArC9Vo93uFsIWRiseXubEst98B4p7UWr4:XrMrcedrSTs8m9VVWRisEs78B4pjr4

Malware Config

Extracted

Family

azorult

C2

http://cwownola.org/AqwE/index.php

Targets

    • Target

      7b7c13961dd5633dbd63837ba08aaed7

    • Size

      720KB

    • MD5

      7b7c13961dd5633dbd63837ba08aaed7

    • SHA1

      e6c7f08a005b4f195cf1f0ac024442157dc0e8c0

    • SHA256

      22a117c101443073379635cf75a22acfaa3dcc65c29bde65a3287d177147f2e1

    • SHA512

      0875f202878e0a9a79adf5ea97f310b1b50b562c1bfcd0644164847b32369833df4f1228b9d7c9fb431fa0d9b7915374f2d8c952ca04aa1eaf0ee34ad30b39b5

    • SSDEEP

      12288:XrMBoA6sOVrlU3LcedGUGnTsbArC9Vo93uFsIWRiseXubEst98B4p7UWr4:XrMrcedrSTs8m9VVWRisEs78B4pjr4

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks