MITRE ATT&CKsoftware (malware)

S0344 Azorult

Published 2019-01-30 Modified 2025-04-16 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.3
Created
2019-01-30

Description

Azorult is a commercial Trojan that is used to steal information from compromised hosts. Azorult has been observed in the wild as early as 2016. In July 2018, Azorult was seen used in a spearphishing campaign against targets in North America. Azorult has been seen used for cryptocurrency theft.

Related

Uses · MITRE ATT&CK (16)

  • T1573.001 Symmetric Cryptography sub-technique
  • T1134.002 Create Process with Token sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1552.001 Credentials In Files sub-technique
  • T1070.004 File Deletion sub-technique
  • T1055.012 Process Hollowing sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1012 Query Registry technique
  • T1016 System Network Configuration Discovery technique
  • T1033 System Owner/User Discovery technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1113 Screen Capture technique
  • T1124 System Time Discovery technique

Referenced by MITRE ATT&CK · uses (1)

References