Overview

overview

10

Static

static

3

c62b0f6c44...18.exe

windows7-x64

10

c62b0f6c44...18.exe

windows10-2004-x64

7

$PLUGINSDIR/lyinn.dll

windows7-x64

10

$PLUGINSDIR/lyinn.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c62b0f6c44abf03c26dab89826464f74_JaffaCakes118

  • Size

    283KB

  • Sample

    240405-a2aecsfg76

  • MD5

    c62b0f6c44abf03c26dab89826464f74

  • SHA1

    9ca8c875e687baa367a35873a85c9916cf3a4c2b

  • SHA256

    27c92fe6c131c4f41f6d524837ba073f396130658c51108f94cb514b7f571dc4

  • SHA512

    d0b8272134709b5aa04712f04f7f1bf02fca9e377e80ee1956b8134df0197fe7d4e94287146e47a828c89fc201dbb4679b87896153f93261d1a5741c56140a62

  • SSDEEP

    6144:PBlL/IkB3YxRxiY0FXe0M6t2BrlkKxXR9vYsfE:pSkB3YxRxMFXY/llR9A1

Score
10/10
azorultinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://21slg.xyz/PL341/index.php

Targets

    • Target

      c62b0f6c44abf03c26dab89826464f74_JaffaCakes118

    • Size

      283KB

    • MD5

      c62b0f6c44abf03c26dab89826464f74

    • SHA1

      9ca8c875e687baa367a35873a85c9916cf3a4c2b

    • SHA256

      27c92fe6c131c4f41f6d524837ba073f396130658c51108f94cb514b7f571dc4

    • SHA512

      d0b8272134709b5aa04712f04f7f1bf02fca9e377e80ee1956b8134df0197fe7d4e94287146e47a828c89fc201dbb4679b87896153f93261d1a5741c56140a62

    • SSDEEP

      6144:PBlL/IkB3YxRxiY0FXe0M6t2BrlkKxXR9vYsfE:pSkB3YxRxMFXY/llR9A1

    Score
    10/10
    azorultinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/lyinn.dll

    • Size

      26KB

    • MD5

      b7f9a167c3af210c5a0be8393b9f04e2

    • SHA1

      8e540308abf226139bf08c61fa21598c0eb055da

    • SHA256

      fd6451ef4e817f604a14be5ab85b5e9890a276ba877d38a9b9544c41ed4718a7

    • SHA512

      75a44e8939f23fa143b67fbd664b81758c0718343e7cb3836b5651bd87e0533d03973b34cbb7b03b50a1fb3828fb0ddf93b205f42e0c8198bfb575088dc9b128

    • SSDEEP

      384:CWt7vqwJ2B3uyRZ3rcg3b8WWA5oYjH8T9jwiXaqQUfkysX:1sBBH3I6WS78T5FX5fkv

    Score
    10/10
    azorultinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult
    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v13

Tasks