AZORult Trojan Serving Aurora Ransomware by MalActor Oktropys
released on 2018-08-21 @ 08:38:11 AM
Towards the end of July 2018, we saw a new version of the AZORult trojan being used in malware campaigns targeting computers globally. In this article, we will dive into the malware and analyze its execution flow and payloads.
The initial infection vector is a phishing email that comes with a downloader malware attached. On execution, it downloads and executes the main malware.