General

  • Target

    6dc18bb8fd9fa91fd53348f265b9069e9ff79ccd4deec8d12a843eea4c7e6557.exe

  • Size

    1.1MB

  • Sample

    250124-szjjcswrdk

  • MD5

    858818f864f1a58e7b0f456a1dcf557f

  • SHA1

    dd114b86bb20461cea571cd0a6f73e2fda1c55ac

  • SHA256

    6dc18bb8fd9fa91fd53348f265b9069e9ff79ccd4deec8d12a843eea4c7e6557

  • SHA512

    e563e57e7ee7bc3d32608f29480a02c45ae95b61646b69135f4c14dad85992fa71db4a7c256b5ed5ec82e98e38d6c838d7d8c31634a957aefe586c805bfd3803

  • SSDEEP

    24576:MAHnh+eWsN3skA4RV1Hom2KXMmHa0cH6Ww/aRf+j5k:rh+ZkldoPK8Ya022k

Malware Config

Extracted

Family

azorult

C2

http://parcelinn.com/wp-content/images/index.php

Targets

    • Target

      6dc18bb8fd9fa91fd53348f265b9069e9ff79ccd4deec8d12a843eea4c7e6557.exe

    • Size

      1.1MB

    • MD5

      858818f864f1a58e7b0f456a1dcf557f

    • SHA1

      dd114b86bb20461cea571cd0a6f73e2fda1c55ac

    • SHA256

      6dc18bb8fd9fa91fd53348f265b9069e9ff79ccd4deec8d12a843eea4c7e6557

    • SHA512

      e563e57e7ee7bc3d32608f29480a02c45ae95b61646b69135f4c14dad85992fa71db4a7c256b5ed5ec82e98e38d6c838d7d8c31634a957aefe586c805bfd3803

    • SSDEEP

      24576:MAHnh+eWsN3skA4RV1Hom2KXMmHa0cH6Ww/aRf+j5k:rh+ZkldoPK8Ya022k

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Azorult family

    • Drops startup file

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks