Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
03-02-2025 02:29
General
-
Target
2025-02-03_00c6743b44ecbf0b16b31ae42d7efdc5_mafia.exe
-
Size
450KB
-
MD5
00c6743b44ecbf0b16b31ae42d7efdc5
-
SHA1
721b4f6e55059ff79edbe329d9136d99780f80ea
-
SHA256
b45b4e2d4745219e2463ec086bc9cc041073dc7a102f83807ff6f2848e916715
-
SHA512
b70333b3a0c338a39b16730edbe8867c4c612f3ea217892acf16bced3ac9f7303d9703f4f6296f7b72098e8fe8e653e9720d7b851ca27a5e757557de6fad4494
-
SSDEEP
6144:TwKQzP+WpgeAVWNI5W9+3TSy0rdXv7Ox1dabq5dZ0FNE5X:TwKmP+YgeAV5W9+jSy050dIFN
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://broadflame.site/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Azorult family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-02-03_00c6743b44ecbf0b16b31ae42d7efdc5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2025-02-03_00c6743b44ecbf0b16b31ae42d7efdc5_mafia.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
116KB
-
Filesize
1024KB
-
Filesize
128KB
-
Filesize
19.6MB
-
Filesize
128KB
-
Filesize
116KB
-
Filesize
19.6MB