azorult | a98715b59bdc8e8246e4b65f71685135de92cef54dc3f7a94cdab4028c51ffed | Triage

Sharing

General

Target

f9f9fa53109dc77ef7fbd09e2a96cd63_JaffaCakes118
Size

272KB
Sample

241218-ecvq8a1qgx
MD5

f9f9fa53109dc77ef7fbd09e2a96cd63
SHA1

4e3a42e4712eb3da48da89776d745a8dbabd6115
SHA256

a98715b59bdc8e8246e4b65f71685135de92cef54dc3f7a94cdab4028c51ffed
SHA512

af0cb955f7c4b3187e6a290d5758d7e687d21613101c6b9e9d322d7dddf3ae3e72bb248f383740a42be012e29adfaa8c3709418c06b1b929c0a5bbb7de3136ab
SSDEEP

3072:QwUJ6F+B9J5nID0kG0UHocyJCZ0tMeFqKRfwuSLY:7dF+BJm0xHocyJvTUKqu

Score

10^/10

azorult discovery infostealer trojan

Malware Config

Extracted

Family

azorult

C2

http://188.68.208.172/p/index.php

Targets

- Target
  
  f9f9fa53109dc77ef7fbd09e2a96cd63_JaffaCakes118
- Size
  
  272KB
- MD5
  
  f9f9fa53109dc77ef7fbd09e2a96cd63
- SHA1
  
  4e3a42e4712eb3da48da89776d745a8dbabd6115
- SHA256
  
  a98715b59bdc8e8246e4b65f71685135de92cef54dc3f7a94cdab4028c51ffed
- SHA512
  
  af0cb955f7c4b3187e6a290d5758d7e687d21613101c6b9e9d322d7dddf3ae3e72bb248f383740a42be012e29adfaa8c3709418c06b1b929c0a5bbb7de3136ab
- SSDEEP
  
  3072:QwUJ6F+B9J5nID0kG0UHocyJCZ0tMeFqKRfwuSLY:7dF+BJm0xHocyJvTUKqu
Score

10^/10

azorult discovery infostealer trojan
- Azorult
  An information stealer that was first discovered in 2016, targeting browsing history and passwords.
  trojan infostealer azorult
- Azorult family
  azorult
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

azorultdiscoveryinfostealertrojan

behavioral2

azorultdiscoveryinfostealertrojan