Overview

overview

10

Static

static

10

builder.exe

windows7-x64

10

builder.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    builder.exe

  • Size

    112KB

  • Sample

    240930-a59nmayfkl

  • MD5

    8fbf94de96942927074fc8cbb7fb4338

  • SHA1

    1a7ab9d6cf2d304535a89ae2328e3b77ac3d204c

  • SHA256

    15c4f6855df38e988301dce1d9053e00b3619578625775dc32e8e1bbe856de01

  • SHA512

    c43ccaa5776e8b84ad3bc5ea337f59ab30d00e11d8dd87390e93dad032632b1d8527980674d3a439fd5d9213732e49b725aabd30b3da1ffc2c12fe3ddba9cd1e

  • SSDEEP

    3072:KExRaX6raoCoCyz6/mqv1JR+yBtGOeheWginaq:faZ1tme+1winV

Score
10/10
azorultdiscoveryinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://195.245.112.115/index.php

Targets

    • Target

      builder.exe

    • Size

      112KB

    • MD5

      8fbf94de96942927074fc8cbb7fb4338

    • SHA1

      1a7ab9d6cf2d304535a89ae2328e3b77ac3d204c

    • SHA256

      15c4f6855df38e988301dce1d9053e00b3619578625775dc32e8e1bbe856de01

    • SHA512

      c43ccaa5776e8b84ad3bc5ea337f59ab30d00e11d8dd87390e93dad032632b1d8527980674d3a439fd5d9213732e49b725aabd30b3da1ffc2c12fe3ddba9cd1e

    • SSDEEP

      3072:KExRaX6raoCoCyz6/mqv1JR+yBtGOeheWginaq:faZ1tme+1winV

    Score
    10/10
    azorultdiscoveryinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks