azorult | 2f7e4765fc3bff8324b7353df04b086292c5a70f788d8193c95d1fc00f43f18a | Triage

Sharing

General

Target

2f7e4765fc3bff8324b7353df04b086292c5a70f788d8193c95d1fc00f43f18a.exe
Size

668KB
Sample

240821-brw12stbkb
MD5

7b8047fdbb913497713a07aeed0d0f4c
SHA1

daff3f98ac5b4f4dda7b290c68686a46f66715d7
SHA256

2f7e4765fc3bff8324b7353df04b086292c5a70f788d8193c95d1fc00f43f18a
SHA512

5d39b6929b9bd5380646bea1200da95a4701d6499e1513fa4e409dbb3c440a34e26ca7cae08b31b8ca91c35208e811d6fa524e220d113e8119490420f65f9554
SSDEEP

12288:G5CzN33A8vsuRZsoLPFTbgFFpJHXGydE1hsL+7j/1kjSQ1bLC4QVtLm8A:fzN33A8vlRLPQAyLE1kjUVZo

Score

10^/10

azorult discovery infostealer trojan

Malware Config

Extracted

Family

azorult

C2

http://82.165.119.177/index.php

Targets

- Target
  
  2f7e4765fc3bff8324b7353df04b086292c5a70f788d8193c95d1fc00f43f18a.exe
- Size
  
  668KB
- MD5
  
  7b8047fdbb913497713a07aeed0d0f4c
- SHA1
  
  daff3f98ac5b4f4dda7b290c68686a46f66715d7
- SHA256
  
  2f7e4765fc3bff8324b7353df04b086292c5a70f788d8193c95d1fc00f43f18a
- SHA512
  
  5d39b6929b9bd5380646bea1200da95a4701d6499e1513fa4e409dbb3c440a34e26ca7cae08b31b8ca91c35208e811d6fa524e220d113e8119490420f65f9554
- SSDEEP
  
  12288:G5CzN33A8vsuRZsoLPFTbgFFpJHXGydE1hsL+7j/1kjSQ1bLC4QVtLm8A:fzN33A8vlRLPQAyLE1kjUVZo
Score

10^/10

azorult discovery infostealer trojan
- Azorult
  An information stealer that was first discovered in 2016, targeting browsing history and passwords.
  trojan infostealer azorult
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

azorultdiscoveryinfostealertrojan

behavioral2