azorult | b5b22c5196c8dd2e5bf98c2f9f76991a4e47b6928293c1d13595fd6b368273cd | Triage

Sharing

General

Target

ee98be0e390b545742d741a6ab6e06f2_JaffaCakes118
Size

279KB
Sample

240920-2yjbmstarq
MD5

ee98be0e390b545742d741a6ab6e06f2
SHA1

b34a13386185a628b4cf5f48ae15b205580a8801
SHA256

b5b22c5196c8dd2e5bf98c2f9f76991a4e47b6928293c1d13595fd6b368273cd
SHA512

9ff94536a20498874479716f4060a7424a40e0bd44fcc3f1e3de18bac078cab02d7d7be0d2f5ac11bf1b0a9f9cd3ae4e49304e1324ac21c17ef0c6f9b509f11e
SSDEEP

6144:bBj57uDaXKm/LI5QPTsw1mMjK48iP2S81svbzHC:37mUpE5Q73HjK+P2S1vn

Score

10^/10

azorult discovery infostealer trojan

Malware Config

Extracted

Family

azorult

C2

http://37.46.150.24/azone/index.php

Targets

- Target
  
  ee98be0e390b545742d741a6ab6e06f2_JaffaCakes118
- Size
  
  279KB
- MD5
  
  ee98be0e390b545742d741a6ab6e06f2
- SHA1
  
  b34a13386185a628b4cf5f48ae15b205580a8801
- SHA256
  
  b5b22c5196c8dd2e5bf98c2f9f76991a4e47b6928293c1d13595fd6b368273cd
- SHA512
  
  9ff94536a20498874479716f4060a7424a40e0bd44fcc3f1e3de18bac078cab02d7d7be0d2f5ac11bf1b0a9f9cd3ae4e49304e1324ac21c17ef0c6f9b509f11e
- SSDEEP
  
  6144:bBj57uDaXKm/LI5QPTsw1mMjK48iP2S81svbzHC:37mUpE5Q73HjK+P2S1vn
Score

10^/10

azorult discovery infostealer trojan
- Azorult
  An information stealer that was first discovered in 2016, targeting browsing history and passwords.
  trojan infostealer azorult
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

azorultdiscoveryinfostealertrojan

behavioral2

azorultdiscoveryinfostealertrojan