Overview

overview

10

Static

static

10

ad78e09375...d6.exe

windows7-x64

10

ad78e09375...d6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad78e093751100e854f713c6f95e5dd6

  • Size

    370KB

  • Sample

    240229-c3k9csbd8z

  • MD5

    ad78e093751100e854f713c6f95e5dd6

  • SHA1

    779c573851259e2e905f8ab69d6481a53b3dfe0e

  • SHA256

    a3a84046f1f21bdedb4a483ccc0fc2fa82a131e459fcf6d2f87c3cac3afb4e74

  • SHA512

    930360f82fabfeea9ebb46fc4c1d8974f8e4c5b01faf05ce391150d5dfadfc8714dc1dba0ba6c13c6f4b3cea23ca0bc9b719d0d503e7cdf07806829bc7b8fa36

  • SSDEEP

    6144:BhuFDlnWmQ5R2O2JAKHv1pMrUZ4JoruxOIIg3J9QUA/TBKik0Z2hQptyFf:AlqEO2qKNyrl0Qbkk0GQ

Score
10/10
azorultzgratinfostealerrattrojan

Malware Config

Extracted

Family

azorult

C2

http://37.0.10.99/PL341/index.php

Targets

    • Target

      ad78e093751100e854f713c6f95e5dd6

    • Size

      370KB

    • MD5

      ad78e093751100e854f713c6f95e5dd6

    • SHA1

      779c573851259e2e905f8ab69d6481a53b3dfe0e

    • SHA256

      a3a84046f1f21bdedb4a483ccc0fc2fa82a131e459fcf6d2f87c3cac3afb4e74

    • SHA512

      930360f82fabfeea9ebb46fc4c1d8974f8e4c5b01faf05ce391150d5dfadfc8714dc1dba0ba6c13c6f4b3cea23ca0bc9b719d0d503e7cdf07806829bc7b8fa36

    • SSDEEP

      6144:BhuFDlnWmQ5R2O2JAKHv1pMrUZ4JoruxOIIg3J9QUA/TBKik0Z2hQptyFf:AlqEO2qKNyrl0Qbkk0GQ

    Score
    10/10
    azorultzgratinfostealerrattrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks