AZORult++: Rewriting history
Tags
country: Azerbaijan Belgium India Uzbekistan Russia Togo Tokelau
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Control Panel - T1218.002 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID 50166819-188b-4865-a2b9-dcacbe1d1bce
Fingerprint bf186e29acb12690
Analysis status DONE
Considered CTI value 2
Text language
Published March 22, 2019, 11:13 a.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Sept. 3, 2024, 6:27 a.m.
Headline AZORult++: Rewriting history
Title AZORult++: Rewriting history
Detected Hints/Tags/Attributes 42/2/8
Source URLs
Redirection Url
Details Source https://securelist.com/azorult-analysis-history/89922/
URL Provider
Details Provider Source level domain
Details securelist.com securelist.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
ravor.ac.ug
Details Domain 1 
daticho.ac.ug
Details md5 1 
08EB8F2E441C26443EB9ABE5A93CD942
Details md5 1 
5B26880F80A00397BC379CAF5CADC564
Details md5 1 
B0EC3E594D20B9D38CC8591BAFF0148B
Details md5 1 
FE8938F0BAAF90516A90610F6E210484
Details Url 1 
http://ravor.ac.ug
Details Url 1 
http://daticho.ac.ug