azorult | c5d1fb403be6aff61fd23b5ec08d63f28f22959e8507d33e1259e9326042c487 | Triage

Sharing

General

Target

a91aa3e42a28efd37e6240fbc7e4870d
Size

1.1MB
Sample

240227-n7llgagg4x
MD5

a91aa3e42a28efd37e6240fbc7e4870d
SHA1

d604bd3f6999944aa4d17e861b6eb2db896e2051
SHA256

c5d1fb403be6aff61fd23b5ec08d63f28f22959e8507d33e1259e9326042c487
SHA512

7972606dd53b744f2ac546bf344cc52f8f03898d706f476622e0e3714eadd156fd0bb8e42e2d594709a7c155c8a0bf931e9bbb3f57894f67158ed8b045dea820
SSDEEP

24576:yo1+ux8Q8ucfxrmpdlqgtt/UP6Fuul/zY5AvEUVxxix:yX7/mpfqgPJFI6S

Score

10^/10

azorult infostealer trojan

Malware Config

Extracted

Family

azorult

C2

http://195.245.112.115/index.php

Targets

- Target
  
  a91aa3e42a28efd37e6240fbc7e4870d
- Size
  
  1.1MB
- MD5
  
  a91aa3e42a28efd37e6240fbc7e4870d
- SHA1
  
  d604bd3f6999944aa4d17e861b6eb2db896e2051
- SHA256
  
  c5d1fb403be6aff61fd23b5ec08d63f28f22959e8507d33e1259e9326042c487
- SHA512
  
  7972606dd53b744f2ac546bf344cc52f8f03898d706f476622e0e3714eadd156fd0bb8e42e2d594709a7c155c8a0bf931e9bbb3f57894f67158ed8b045dea820
- SSDEEP
  
  24576:yo1+ux8Q8ucfxrmpdlqgtt/UP6Fuul/zY5AvEUVxxix:yX7/mpfqgPJFI6S
Score

10^/10

azorult infostealer trojan
- Azorult
  An information stealer that was first discovered in 2016, targeting browsing history and passwords.
  trojan infostealer azorult
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

azorultinfostealertrojan

behavioral2

azorultinfostealertrojan