azorult | 5d172277c4ad1ef6641e495917ca9d31080016847c56df3a3bac486f5e150e8f | Triage

Sharing

General

Target

JaffaCakes118_5d172277c4ad1ef6641e495917ca9d31080016847c56df3a3bac486f5e150e8f
Size

60KB
Sample

241223-vv1yyswkas
MD5

ce0bd9471767144250435d4de4dcaa79
SHA1

1175790a33f3f63571a029f187fd0c49618b33bf
SHA256

5d172277c4ad1ef6641e495917ca9d31080016847c56df3a3bac486f5e150e8f
SHA512

077d79823ad258eb406310405d94e8b799ad31304962516ae5371d8c0ab22b94638dedd790f5b844003212f867868ac30344c286d870d2d33857c3bf0186150b
SSDEEP

1536:uHUTKyE4xKrR1JFTG/R/nJeEoNX1G03l4Ugp2NPfVqghsqG:uHiKH1F49nJeEoXGoxgpY9fhsqG

Score

10^/10

azorult discovery infostealer trojan

Malware Config

Extracted

Family

azorult

C2

http://fastinvestmentbroker.com/frank/index.php

Targets

- Target
  
  698c71dfff3a76279617638fa1c69d4b562484409434c63250ebb706f31318de
- Size
  
  112KB
- MD5
  
  29a5748cbeca4cc87513b863238c1385
- SHA1
  
  36b1dd3e662f29ead290b78610208bb8cef067c3
- SHA256
  
  698c71dfff3a76279617638fa1c69d4b562484409434c63250ebb706f31318de
- SHA512
  
  219adcde2cecc442cfc8ee9d2e047c4da4cda1bd1f4eb68b4f8128c8b1aeb9a248aafe21b94a7b3acfac21787e3125c2edcd21ec7c0267f54ad83394fdea0fe4
- SSDEEP
  
  3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/axg/:Zzx7ZApszolIo7lf/ipT/a
Score

10^/10

azorult discovery infostealer trojan
- Azorult
  An information stealer that was first discovered in 2016, targeting browsing history and passwords.
  trojan infostealer azorult
- Azorult family
  azorult
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

azorultdiscoveryinfostealertrojan

behavioral2

azorultdiscoveryinfostealertrojan