Overview

overview

10

Static

static

3

DHL INTERN...DF.exe

windows7-x64

10

DHL INTERN...DF.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DHL INTERNATIONAL AWB#87355432189 PDF.exe

  • Size

    872KB

  • Sample

    240207-gxledsfaen

  • MD5

    56be22ccd46d1f1ea43ff693729eced3

  • SHA1

    875df1a72db7bdab88e38d240b62cefd6683203d

  • SHA256

    d4965c645437bdfb5eaf7eed2175fe89501fd437bede13cc91de0f36a3c745cd

  • SHA512

    cad055009f45da6f2b2181786c2e36d12686c9904e38a8e0e81bf134f6f51659e320f3b5da225f5c670c95c56a4784e565235520d128ec4e4d2f2a6310acfadb

  • SSDEEP

    24576:3tqRLCyDRdM0SwcSYVPnthjXokXNcdE4q:dqRrDRbv8/tKZd+

Score
10/10
azorultinfostealertrojan

Malware Config

Targets

    • Target

      DHL INTERNATIONAL AWB#87355432189 PDF.exe

    • Size

      872KB

    • MD5

      56be22ccd46d1f1ea43ff693729eced3

    • SHA1

      875df1a72db7bdab88e38d240b62cefd6683203d

    • SHA256

      d4965c645437bdfb5eaf7eed2175fe89501fd437bede13cc91de0f36a3c745cd

    • SHA512

      cad055009f45da6f2b2181786c2e36d12686c9904e38a8e0e81bf134f6f51659e320f3b5da225f5c670c95c56a4784e565235520d128ec4e4d2f2a6310acfadb

    • SSDEEP

      24576:3tqRLCyDRdM0SwcSYVPnthjXokXNcdE4q:dqRrDRbv8/tKZd+

    Score
    10/10
    azorultinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Loads dropped DLL

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      3f176d1ee13b0d7d6bd92e1c7a0b9bae

    • SHA1

      fe582246792774c2c9dd15639ffa0aca90d6fd0b

    • SHA256

      fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e

    • SHA512

      0a69124819b7568d0dea4e9e85ce8fe61c7ba697c934e3a95e2dcfb9f252b1d9da7faf8774b6e8efd614885507acc94987733eba09a2f5e7098b774dfc8524b6

    • SSDEEP

      192:OPtkumJX7zB22kGwfy0mtVgkCPOsX1un:/702k5qpdsXQn

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks