Overview
overview
10Static
static
3??????????...??.exe
windows7-x64
10??????????...??.exe
windows10-2004-x64
10??????????...??.exe
windows10-ltsc_2021-x64
10??????????...??.exe
windows11-21h2-x64
10jjhluxw.exe
windows7-x64
3jjhluxw.exe
windows10-2004-x64
3jjhluxw.exe
windows10-ltsc_2021-x64
3jjhluxw.exe
windows11-21h2-x64
3General
-
Target
??????????? ??????????????.exe
-
Size
234KB
-
Sample
250319-yzdk1a1yew
-
MD5
38d378ff52ea3dba53a07eee3ed769c7
-
SHA1
94181ebcbe353d496701681b6bd03e06c1c63751
-
SHA256
0791c43de42272d1f5eb20ee67b0ad4194e2bb8f00975aa906605d8cd0c4c6a4
-
SHA512
ab096595c92f3bca5659b2156e3daed47f70dd8ab3ddff1506ff164a50fa4d15f2503776d43633056ebcb569255295f8f7af53a031f552da1a3f73d017c105cc
-
SSDEEP
6144:gYa6oBsctoZqfq4S4JV2p9wubvEjRTsObhUXLbPp:gYxcCZqHp2prEVs+C7F
Static task
static1
Behavioral task
behavioral1
Sample
??????????? ??????????????.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
??????????? ??????????????.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral3
Sample
??????????? ??????????????.exe
Resource
win10ltsc2021-20250314-en
Behavioral task
behavioral4
Sample
??????????? ??????????????.exe
Resource
win11-20250313-en
Behavioral task
behavioral5
Sample
jjhluxw.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
jjhluxw.exe
Resource
win10v2004-20250313-en
Behavioral task
behavioral7
Sample
jjhluxw.exe
Resource
win10ltsc2021-20250314-en
Behavioral task
behavioral8
Sample
jjhluxw.exe
Resource
win11-20250313-en
Malware Config
Extracted
azorult
http://141.98.6.162/office/index.php
Targets
-
-
Target
??????????? ??????????????.exe
-
Size
234KB
-
MD5
38d378ff52ea3dba53a07eee3ed769c7
-
SHA1
94181ebcbe353d496701681b6bd03e06c1c63751
-
SHA256
0791c43de42272d1f5eb20ee67b0ad4194e2bb8f00975aa906605d8cd0c4c6a4
-
SHA512
ab096595c92f3bca5659b2156e3daed47f70dd8ab3ddff1506ff164a50fa4d15f2503776d43633056ebcb569255295f8f7af53a031f552da1a3f73d017c105cc
-
SSDEEP
6144:gYa6oBsctoZqfq4S4JV2p9wubvEjRTsObhUXLbPp:gYxcCZqHp2prEVs+C7F
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Azorult family
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-
-
-
Target
jjhluxw.exe
-
Size
108KB
-
MD5
5f16ae72eb6fbd3040d5d3c18c5ac304
-
SHA1
4e1604b5e763aa9f336996c75cb3e8436f16850f
-
SHA256
3b22459608be3d78066a25fdf807f6628de79c01799cd5e03095c2ae996bca16
-
SHA512
7ca61d0f536638094b67f8c7b12ab5ff4d234299f2365ab9cd7de78bd1d257195b6c112039761e2620a597a65d59cfd856790db075bef6d69afdaeb35d49286d
-
SSDEEP
3072:Mgke83whBLmHr9x5FKEY8Hs+k3d0Ge4NStHywRR+NwX3:MgwA0rGEY0AWRV3
Score3/10 -