General

  • Target

    5a5784318e195205f17fe5fe4f4bc91f1673080426ec07fe1d2a963dab746096N.exe

  • Size

    1.1MB

  • Sample

    250125-p9eflsvqej

  • MD5

    4484188cb0697ff50810eda8a0274c40

  • SHA1

    04432824008a4a5a82d259bf9df637cbecaac3f0

  • SHA256

    5a5784318e195205f17fe5fe4f4bc91f1673080426ec07fe1d2a963dab746096

  • SHA512

    ea0dd1d49755abf04a8fb07b8ab9bd72dc64af8c7858e751a5dd38a14bf249c8c78bbcf97dfdd58f14399ab35d309c87cb6c1272b920c61781df5e577e81b361

  • SSDEEP

    24576:MAHnh+eWsN3skA4RV1Hom2KXMmHa0cH6Ww/aRf+j5k:rh+ZkldoPK8Ya022k

Malware Config

Extracted

Family

azorult

C2

http://parcelinn.com/wp-content/images/index.php

Targets

    • Target

      5a5784318e195205f17fe5fe4f4bc91f1673080426ec07fe1d2a963dab746096N.exe

    • Size

      1.1MB

    • MD5

      4484188cb0697ff50810eda8a0274c40

    • SHA1

      04432824008a4a5a82d259bf9df637cbecaac3f0

    • SHA256

      5a5784318e195205f17fe5fe4f4bc91f1673080426ec07fe1d2a963dab746096

    • SHA512

      ea0dd1d49755abf04a8fb07b8ab9bd72dc64af8c7858e751a5dd38a14bf249c8c78bbcf97dfdd58f14399ab35d309c87cb6c1272b920c61781df5e577e81b361

    • SSDEEP

      24576:MAHnh+eWsN3skA4RV1Hom2KXMmHa0cH6Ww/aRf+j5k:rh+ZkldoPK8Ya022k

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Azorult family

    • Drops startup file

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks