Analysis
- max time kernel
150s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
19/03/2024, 00:42
General
- Target d4c7576ec36d8ed8da8385f11181f4c6.exe
- Size 165KB
- Sample240319-a2rnmsde5z
- SHA256 c43f6a8baf0ad84ca756e83e47f6b47fb6cd99290d64492ee714caf04b40bfee
Score
10/10
Malware Config
Extracted
Family
-
azorult
C2
-
http://finlzzm.com/index.php
Signatures
- Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
- Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d4c7576ec36d8ed8da8385f11181f4c6.exe"C:\Users\Admin\AppData\Local\Temp\d4c7576ec36d8ed8da8385f11181f4c6.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3096 -s 13922⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3096 -ip 30961⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3096-1-0x0000000000580000-0x0000000000680000-memory.dmp
memory/3096-2-0x0000000000400000-0x000000000042D000-memory.dmp
memory/3096-3-0x0000000000400000-0x000000000042D000-memory.dmp