General

  • Target
    af5d9e7613baf2df33d65f060279f5678e92b6fc123efb7ac45ffabca5a2e23c.exe
  • Size 400KB
  • Sample240821-ckvebavepc
  • SHA256 af5d9e7613baf2df33d65f060279f5678e92b6fc123efb7ac45ffabca5a2e23c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • azorult

C2
  • http://129.146.140.127/index.php

Targets

    • Target
      af5d9e7613baf2df33d65f060279f5678e92b6fc123efb7ac45ffabca5a2e23c.exe
    • Size 400KB
    • SHA256 af5d9e7613baf2df33d65f060279f5678e92b6fc123efb7ac45ffabca5a2e23c
    • MD5 SHA1 SHA512 SSDEEP
    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks