azorult | 2b65c144e4c4ce8c8a61cebe60f65ccc94c03baaecbc569039a24cdff7bcb9fb | Triage

Sharing

General

Target

0d0b3b4d761b9a1390f8aad3b3b2ed6d_JaffaCakes118
Size

338KB
Sample

240328-w9m63sdb7y
MD5

0d0b3b4d761b9a1390f8aad3b3b2ed6d
SHA1

29c3c0aa6bb03f3d214886650692ac5749c2e28e
SHA256

2b65c144e4c4ce8c8a61cebe60f65ccc94c03baaecbc569039a24cdff7bcb9fb
SHA512

961ba4cbc3ba764a468330d3dc410d98f2c4f5e2ce42bd498a5733e521c0e6bd6818c80abb53edc043d53a7d67d52215e5d2dfc223795ab8cc7fb8cad5ba66c6
SSDEEP

6144:1v0QM/k2x30LufksdBFdttHJeL59j7J9Y:1vQ8250LussdpJeL5NJq

Score

10^/10

azorult infostealer trojan

Malware Config

Extracted

Family

azorult

C2

https://squerad.com/gold/index.php

Targets

- Target
  
  0d0b3b4d761b9a1390f8aad3b3b2ed6d_JaffaCakes118
- Size
  
  338KB
- MD5
  
  0d0b3b4d761b9a1390f8aad3b3b2ed6d
- SHA1
  
  29c3c0aa6bb03f3d214886650692ac5749c2e28e
- SHA256
  
  2b65c144e4c4ce8c8a61cebe60f65ccc94c03baaecbc569039a24cdff7bcb9fb
- SHA512
  
  961ba4cbc3ba764a468330d3dc410d98f2c4f5e2ce42bd498a5733e521c0e6bd6818c80abb53edc043d53a7d67d52215e5d2dfc223795ab8cc7fb8cad5ba66c6
- SSDEEP
  
  6144:1v0QM/k2x30LufksdBFdttHJeL59j7J9Y:1vQ8250LussdpJeL5NJq
Score

10^/10

azorult infostealer trojan
- Azorult
  An information stealer that was first discovered in 2016, targeting browsing history and passwords.
  trojan infostealer azorult
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

azorultinfostealertrojan

behavioral2

azorultinfostealertrojan