azorult | 6fcfc3f53dad97ffbf959f109c0d1b07ec97ed017ebb9495a3d01e19ded2c31a | Triage

Sharing

General

Target

JaffaCakes118_6fcfc3f53dad97ffbf959f109c0d1b07ec97ed017ebb9495a3d01e19ded2c31a
Size

639KB
Sample

241229-fk53latjfy
MD5

140b01645468f62a22b644ab6a425516
SHA1

80734ddeaa5b7852c00ccfe691b522b81cc24807
SHA256

6fcfc3f53dad97ffbf959f109c0d1b07ec97ed017ebb9495a3d01e19ded2c31a
SHA512

0e522a20096d467e5230cd8d65343a1283e5bc4ef57411ff70e48a6999bf500917096c38cb89a506af93f55e4c59769749d177a132a414ddf18e586065eb1e96
SSDEEP

12288:mwiOEW33uOHr+vT00vVMG/sgBaBdDT/bbdcPvs8Dquo8M4FtzCKU9lK:mwioHC/MMsgBaBdDrbbKsqHNMOCKWK

Score

10^/10

azorult discovery infostealer trojan

Malware Config

Extracted

Family

azorult

C2

http://nnpcoil.buzz/kendrick/index.php

Targets

- Target
  
  502f86e2e673029e2141d54c6f08a6ec8b4e6dc6ae7419f5a985c77996da8493
- Size
  
  802KB
- MD5
  
  618c416de4a5462a2b4b1be9571193ce
- SHA1
  
  9c20f4cce7b93db892c9aaa3d13022534fd5dd1f
- SHA256
  
  502f86e2e673029e2141d54c6f08a6ec8b4e6dc6ae7419f5a985c77996da8493
- SHA512
  
  1489d0155ddd21949c95364df77e7c5f5fc8c09b2efa31c71fca80ecf96f79adabf73bb0846c00e64d6cf2fe43d8ef0ac7a13aae8d67df04e299c8c836ee56e7
- SSDEEP
  
  12288:3gB6vAcENRh7jW8HrMvT00hVMObsyBaBdnTvbbXcPvY8h0uo804FJzCKU9sW6:LAPNmdtMOsyBaBdnjbbMYGRN0UCKF
Score

10^/10

azorult discovery infostealer trojan
- Azorult
  An information stealer that was first discovered in 2016, targeting browsing history and passwords.
  trojan infostealer azorult
- Azorult family
  azorult
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

azorultdiscoveryinfostealertrojan

behavioral2

azorultdiscoveryinfostealertrojan