Analysis
-
max time kernel
145s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
29-01-2024 17:44
General
-
Target
80784f4118d7c4d54dd555436fbd5213.exe
-
Size
242KB
-
MD5
80784f4118d7c4d54dd555436fbd5213
-
SHA1
dd0a5e46cbd2daa4088ec0185a9f1ba238fe4ba8
-
SHA256
390724bb7df37d40b8028f27ee101903256f930df0795fe88b9f7a4ddd6a46d1
-
SHA512
0015ca19963813aab9b47207c787bab0efbcfb909c28fa915c264431f84fe8b649fdc771fdc0fc68835fc79c750911d3f92c4746049a47044cff13932c210b8e
-
SSDEEP
6144:42ASK7jM2Aqye3575wB/WarzFWIgc7zCw:Ov7L6a5+BXzFWHw
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://systemwebanalytycs.com/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\80784f4118d7c4d54dd555436fbd5213.exe"C:\Users\Admin\AppData\Local\Temp\80784f4118d7c4d54dd555436fbd5213.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5104 -s 13842⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5104 -ip 51041⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
548KB
-
Filesize
548KB
-
Filesize
8.0MB
-
Filesize
548KB
-
Filesize
548KB