General

  • Target

    bfc540e107105f338e3ffd51684a95cb

  • Size

    398KB

  • Sample

    240311-edp75abd58

  • MD5

    bfc540e107105f338e3ffd51684a95cb

  • SHA1

    69630788640cf3d13123cfddbbde88bbca1091c0

  • SHA256

    7aaf2650f6e2914340ca5230eec2da557e4045ce9cf20ada8ba8e4d5d2228d7b

  • SHA512

    22276b7b30c571c9d7a619196b21a22840652cbd21c59c0dc043485c3ddfc872081822d8bb091c3c76f1c6007000f6d9fe719ff330d6dfe4b13e276226d1f836

  • SSDEEP

    12288:9+4txFPMBur44CyzbwNq0Lr/IJ+StcyM/CCM98:9+4hMA8pgIlLrwJ+bfvM98

Malware Config

Extracted

Family

azorult

C2

http://cwownola.org/AqwE/index.php

Targets

    • Target

      bfc540e107105f338e3ffd51684a95cb

    • Size

      398KB

    • MD5

      bfc540e107105f338e3ffd51684a95cb

    • SHA1

      69630788640cf3d13123cfddbbde88bbca1091c0

    • SHA256

      7aaf2650f6e2914340ca5230eec2da557e4045ce9cf20ada8ba8e4d5d2228d7b

    • SHA512

      22276b7b30c571c9d7a619196b21a22840652cbd21c59c0dc043485c3ddfc872081822d8bb091c3c76f1c6007000f6d9fe719ff330d6dfe4b13e276226d1f836

    • SSDEEP

      12288:9+4txFPMBur44CyzbwNq0Lr/IJ+StcyM/CCM98:9+4hMA8pgIlLrwJ+bfvM98

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks