Analysis

  • max time kernel
    103s
  • max time network
    110s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250314-en
  • resource tags

    arch:x64arch:x86image:win11-20250314-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    26/03/2025, 07:31

General

  • Target
    zSokUEuZV.exe
  • Size 112KB
  • Sample250326-jcsdbasps5
  • SHA256 0f2fff20a6b8bede771eb51b243b58fcc06ecf7b5ba81bdc8699dca2c88bc9e7
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • azorult

C2
  • http://195.245.112.115/index.php

Signatures

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

  • Azorult family
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\zSokUEuZV.exe
    "C:\Users\Admin\AppData\Local\Temp\zSokUEuZV.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3224

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3224-0-0x0000000000400000-0x0000000000420000-memory.dmp