Overview

overview

10

Static

static

10

xEVMPSIK.exe

windows7-x64

10

xEVMPSIK.exe

windows10-1703-x64

10

xEVMPSIK.exe

windows10-2004-x64

10

xEVMPSIK.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xEVMPSIK.bin.zip

  • Size

    59KB

  • MD5

    c529c832a91b3441c1061a8206268865

  • SHA1

    64c93ca8fc88c8a3503fce10c56b0ef5a1a81f7e

  • SHA256

    ab5745159087ace784e77631a7011f4cc4b392606beae4de10e4040f945a2b1c

  • SHA512

    cb3115082fb6c1ae48a9513746402e4ffd901af65e42b10c48f0c740c90aaf621b6ff731e6d47a5e2a862fa8d8e087f8a79e4c115915eb99cd4ee6dd1d3bfd93

  • SSDEEP

    1536:abHZFfUJSPIWWjRlgXHw6qRf8yepJVEJU47kjqFx/:a16gPIWk6qZepHEJIgx/

Score
10/10
azorult

Malware Config

Extracted

Family

azorult

C2

http://195.245.112.115/index.php

Signatures

  • Azorult family
    azorult
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xEVMPSIK.bin.zip
    .zip

    Password: infected

  • xEVMPSIK.bin
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections