General

  • Target

    Sigmanly_d9f20fbf64170d65d1a1f2fd66a997913cab8ddb1389df8b1fd1e7ae0f1d0b5b

  • Size

    112KB

  • MD5

    043fe9d1a841d94435f8882125769b0c

  • SHA1

    f410048ce061a747048dee6166ef001a6448871d

  • SHA256

    d9f20fbf64170d65d1a1f2fd66a997913cab8ddb1389df8b1fd1e7ae0f1d0b5b

  • SHA512

    40f15d849cf49a6965c7feb86f52fdcb96b84e4bd3f3aba26010e7ac44168cbbd27ee97bab4e34dbff0550e64eb65f2fb403a96bd8fc9275fdbb573d4bd3ffcc

  • SSDEEP

    3072:KExRaX6raoCoCyz6/mqv1JR+yBtGOeheWgin8q:faZ1tme+1winj

Score
10/10

Malware Config

Extracted

Family

azorult

C2

http://195.245.112.115/index.php

Signatures

  • Azorult family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Sigmanly_d9f20fbf64170d65d1a1f2fd66a997913cab8ddb1389df8b1fd1e7ae0f1d0b5b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections