General

  • Target

    a9aa5cc96156193b9e742b2b05c111b9

  • Size

    673KB

  • Sample

    240227-vbvmtsef4y

  • MD5

    a9aa5cc96156193b9e742b2b05c111b9

  • SHA1

    d352379eab94a73f6289af90877def65385e8b2a

  • SHA256

    8a7136d6f15d4d79c4d1b89e39ac1c8678c49649d66a451c90a135e4db278b6b

  • SHA512

    aef3b9168d3dbaedd66dcb0450a7512bd40fdeb7d8aa2bd9b2c44f4f9d17245c26cbd368755bfee04d85e68c6c200a8e4dcdfb0e54015c51fe25df335a272561

  • SSDEEP

    12288:6tEn22jblqFTdnsgNILprnbrJZhltmRcrFjEYW5t:6qlqFps6ILprnb9Z3tAchY9

Malware Config

Extracted

Family

azorult

C2

http://carolinascarpelini.com.br/set/node/index.php

Targets

    • Target

      a9aa5cc96156193b9e742b2b05c111b9

    • Size

      673KB

    • MD5

      a9aa5cc96156193b9e742b2b05c111b9

    • SHA1

      d352379eab94a73f6289af90877def65385e8b2a

    • SHA256

      8a7136d6f15d4d79c4d1b89e39ac1c8678c49649d66a451c90a135e4db278b6b

    • SHA512

      aef3b9168d3dbaedd66dcb0450a7512bd40fdeb7d8aa2bd9b2c44f4f9d17245c26cbd368755bfee04d85e68c6c200a8e4dcdfb0e54015c51fe25df335a272561

    • SSDEEP

      12288:6tEn22jblqFTdnsgNILprnbrJZhltmRcrFjEYW5t:6qlqFps6ILprnb9Z3tAchY9

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks