General

  • Target

    2F530A45E4ACF58D16DAD1B1E23B5B1419BA893C2F76F.exe

  • Size

    203KB

  • Sample

    210927-2q4mlsaccr

  • MD5

    73bd76f0549cc1992d943ddfd92a9c4d

  • SHA1

    802e70b76c7c0860b3a4a257b1bc96fc3430ff01

  • SHA256

    2f530a45e4acf58d16dad1b1e23b5b1419ba893c2f76f6625da3acb86933462f

  • SHA512

    4a524d1a552eb6d101f9ceb25c7dc608669eeca7dc99bc5ddc2b9d7d3c8f4ffd3cd8f12c3328b07d80888d6758aff970b3e6898f88c3451a058224b83007e521

Malware Config

Extracted

Family

azorult

C2

http://admin.svapofit.com/azs/index.php

Targets

    • Target

      2F530A45E4ACF58D16DAD1B1E23B5B1419BA893C2F76F.exe

    • Size

      203KB

    • MD5

      73bd76f0549cc1992d943ddfd92a9c4d

    • SHA1

      802e70b76c7c0860b3a4a257b1bc96fc3430ff01

    • SHA256

      2f530a45e4acf58d16dad1b1e23b5b1419ba893c2f76f6625da3acb86933462f

    • SHA512

      4a524d1a552eb6d101f9ceb25c7dc608669eeca7dc99bc5ddc2b9d7d3c8f4ffd3cd8f12c3328b07d80888d6758aff970b3e6898f88c3451a058224b83007e521

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • suricata: ET MALWARE AZORult Variant.4 Checkin M2

      suricata: ET MALWARE AZORult Variant.4 Checkin M2

    • suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M16

      suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M16

    • suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M6

      suricata: ET MALWARE Win32/AZORult V3.2 Client Checkin M6

MITRE ATT&CK Matrix

Tasks