General

  • Target

    054a6eddefc70dff71e491106a8e64ce.exe

  • Size

    2.2MB

  • Sample

    240627-dsf3bszbpb

  • MD5

    054a6eddefc70dff71e491106a8e64ce

  • SHA1

    e3152b9548d852adc492ffe095e58b725e6fa159

  • SHA256

    890df73a5c131dd74522fca2bad1b159663133afef6203ba03d310a423173e49

  • SHA512

    27e69af7657da0b82951370eda4ca32b24a5b51ec090cc777380e19986fe39402b1a4cb8a96f96d838883e129dce8533e48a00dc57cf2f127c8aace464d2172f

  • SSDEEP

    49152:NNiz0ztMs0jXUye9NqPJOu0NwYsZ+AiWLGgKTO6YFHSnr:+Izh0PhOukwYsZ+A+gKTO+r

Malware Config

Extracted

Family

azorult

C2

http://195.245.112.115/index.php

Targets

    • Target

      054a6eddefc70dff71e491106a8e64ce.exe

    • Size

      2.2MB

    • MD5

      054a6eddefc70dff71e491106a8e64ce

    • SHA1

      e3152b9548d852adc492ffe095e58b725e6fa159

    • SHA256

      890df73a5c131dd74522fca2bad1b159663133afef6203ba03d310a423173e49

    • SHA512

      27e69af7657da0b82951370eda4ca32b24a5b51ec090cc777380e19986fe39402b1a4cb8a96f96d838883e129dce8533e48a00dc57cf2f127c8aace464d2172f

    • SSDEEP

      49152:NNiz0ztMs0jXUye9NqPJOu0NwYsZ+AiWLGgKTO6YFHSnr:+Izh0PhOukwYsZ+A+gKTO+r

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks