AZORult Malware: Technical Analysis - ANY.RUN's Cybersecurity Blog
Tags
Common Information
| Type | Value |
|---|---|
| UUID | f6ef2dd3-7bc9-424c-80ee-0c1a53a7c666 |
| Fingerprint | ba2479746df38591 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Sept. 4, 2024, 5:49 a.m. |
| Added to db | Sept. 4, 2024, 8:38 a.m. |
| Last updated | Nov. 17, 2024, 6:56 p.m. |
| Headline | AZORult Malware: Technical Analysis |
| Title | AZORult Malware: Technical Analysis - ANY.RUN's Cybersecurity Blog |
| Detected Hints/Tags/Attributes | 135/3/71 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://any.run/cybersecurity-blog/azorult-malware-analysis/ |
URL Provider
| Details | Provider | Source level domain |
|---|---|---|
| Details | any.run | any.run |
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 14 | ✔ | ANY.RUN's Cybersecurity Blog | https://any.run/cybersecurity-blog/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 911 | any.run |
|
| Details | Domain | 1 | ehzwq.shop |
|
| Details | Domain | 1 | fp-afd-nocache-ccp.azureedge.net |
|
| Details | Domain | 18 | lencr.org |
|
| Details | Domain | 1 | a-ring-fallback.msedge.net |
|
| Details | Domain | 1 | t-ring-fdv2.msedge.net |
|
| Details | Domain | 1 | reap.skyestates.com.mt |
|
| Details | File | 1208 | powershell.exe |
|
| Details | File | 1 | declinometer235.exe |
|
| Details | md5 | 1 | 0824428fdccf3c63fc1ca19a1dd7ef74 |
|
| Details | sha256 | 1 | 90a82defe606e51d2826265a43737130682b738241700782d7e41188475b7fb7 |
|
| Details | IPv4 | 1 | 108.167.181.251 |
|
| Details | IPv4 | 1 | 20.166.126.56 |
|
| Details | IPv4 | 1 | 52.168.117.175 |
|
| Details | IPv4 | 2 | 20.223.35.26 |
|
| Details | IPv4 | 1 | 2.23.209.130 |
|
| Details | IPv4 | 1 | 2.23.209.158 |
|
| Details | IPv4 | 1 | 2.23.209.140 |
|
| Details | IPv4 | 1 | 13.107.246.45 |
|
| Details | IPv4 | 1 | 131.253.33.254 |
|
| Details | IPv4 | 3 | 20.99.185.48 |
|
| Details | MITRE ATT&CK Techniques | 310 | T1047 |
|
| Details | MITRE ATT&CK Techniques | 695 | T1059 |
|
| Details | MITRE ATT&CK Techniques | 460 | T1059.001 |
|
| Details | MITRE ATT&CK Techniques | 80 | T1064 |
|
| Details | MITRE ATT&CK Techniques | 239 | T1106 |
|
| Details | MITRE ATT&CK Techniques | 120 | T1129 |
|
| Details | MITRE ATT&CK Techniques | 207 | T1547 |
|
| Details | MITRE ATT&CK Techniques | 30 | T1547.009 |
|
| Details | MITRE ATT&CK Techniques | 164 | T1574 |
|
| Details | MITRE ATT&CK Techniques | 227 | T1574.002 |
|
| Details | MITRE ATT&CK Techniques | 440 | T1055 |
|
| Details | MITRE ATT&CK Techniques | 627 | T1027 |
|
| Details | MITRE ATT&CK Techniques | 160 | T1027.002 |
|
| Details | MITRE ATT&CK Techniques | 40 | T1027.009 |
|
| Details | MITRE ATT&CK Techniques | 348 | T1036 |
|
| Details | MITRE ATT&CK Techniques | 247 | T1070 |
|
| Details | MITRE ATT&CK Techniques | 93 | T1070.006 |
|
| Details | MITRE ATT&CK Techniques | 550 | T1112 |
|
| Details | MITRE ATT&CK Techniques | 504 | T1140 |
|
| Details | MITRE ATT&CK Techniques | 265 | T1222 |
|
| Details | MITRE ATT&CK Techniques | 238 | T1497 |
|
| Details | MITRE ATT&CK Techniques | 107 | T1564 |
|
| Details | MITRE ATT&CK Techniques | 66 | T1564.003 |
|
| Details | MITRE ATT&CK Techniques | 289 | T1003 |
|
| Details | MITRE ATT&CK Techniques | 113 | T1552 |
|
| Details | MITRE ATT&CK Techniques | 89 | T1552.001 |
|
| Details | MITRE ATT&CK Techniques | 23 | T1552.002 |
|
| Details | MITRE ATT&CK Techniques | 75 | T1010 |
|
| Details | MITRE ATT&CK Techniques | 501 | T1012 |
|
| Details | MITRE ATT&CK Techniques | 243 | T1018 |
|
| Details | MITRE ATT&CK Techniques | 433 | T1057 |
|
| Details | MITRE ATT&CK Techniques | 1006 | T1082 |
|
| Details | MITRE ATT&CK Techniques | 585 | T1083 |
|
| Details | MITRE ATT&CK Techniques | 185 | T1518 |
|
| Details | MITRE ATT&CK Techniques | 141 | T1518.001 |
|
| Details | MITRE ATT&CK Techniques | 534 | T1005 |
|
| Details | MITRE ATT&CK Techniques | 89 | T1114 |
|
| Details | MITRE ATT&CK Techniques | 82 | T1115 |
|
| Details | MITRE ATT&CK Techniques | 32 | T1125 |
|
| Details | MITRE ATT&CK Techniques | 444 | T1071 |
|
| Details | MITRE ATT&CK Techniques | 159 | T1095 |
|
| Details | MITRE ATT&CK Techniques | 163 | T1573 |
|
| Details | MITRE ATT&CK Techniques | 48 | T1529 |
|
| Details | Windows Registry Key | 20 | HKEY_CURRENT_USER\Control |
|
| Details | Windows Registry Key | 1 | HKEY_USERS\S-1-5-21-575823232-3065301323-1442773979-1000\fordjelsesbesvret\Uninstall\Spidsfindigeres22\luftrr |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\fordjelsesbesvret\Uninstall\Spidsfindigeres22\luftrr |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\fordjelsesbesvret\Uninstall\Spidsfindigeres22luftrr |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\fordjelsesbesvret |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\fordjelsesbesvret\Uninstall |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\fordjelsesbesvret\Uninstall\Spidsfindigeres22 |