Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
27-02-2024 12:02
General
-
Target
a91aa3e42a28efd37e6240fbc7e4870d.exe
-
Size
1.1MB
-
MD5
a91aa3e42a28efd37e6240fbc7e4870d
-
SHA1
d604bd3f6999944aa4d17e861b6eb2db896e2051
-
SHA256
c5d1fb403be6aff61fd23b5ec08d63f28f22959e8507d33e1259e9326042c487
-
SHA512
7972606dd53b744f2ac546bf344cc52f8f03898d706f476622e0e3714eadd156fd0bb8e42e2d594709a7c155c8a0bf931e9bbb3f57894f67158ed8b045dea820
-
SSDEEP
24576:yo1+ux8Q8ucfxrmpdlqgtt/UP6Fuul/zY5AvEUVxxix:yX7/mpfqgPJFI6S
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://195.245.112.115/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a91aa3e42a28efd37e6240fbc7e4870d.exe"C:\Users\Admin\AppData\Local\Temp\a91aa3e42a28efd37e6240fbc7e4870d.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.5MB
-
Filesize
3.5MB