General
-
Target
c62b0f6c44abf03c26dab89826464f74_JaffaCakes118
-
Size
283KB
-
Sample
240405-a2aecsfg76
-
MD5
c62b0f6c44abf03c26dab89826464f74
-
SHA1
9ca8c875e687baa367a35873a85c9916cf3a4c2b
-
SHA256
27c92fe6c131c4f41f6d524837ba073f396130658c51108f94cb514b7f571dc4
-
SHA512
d0b8272134709b5aa04712f04f7f1bf02fca9e377e80ee1956b8134df0197fe7d4e94287146e47a828c89fc201dbb4679b87896153f93261d1a5741c56140a62
-
SSDEEP
6144:PBlL/IkB3YxRxiY0FXe0M6t2BrlkKxXR9vYsfE:pSkB3YxRxMFXY/llR9A1
Static task
static1
Behavioral task
behavioral1
Sample
c62b0f6c44abf03c26dab89826464f74_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c62b0f6c44abf03c26dab89826464f74_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/lyinn.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/lyinn.dll
Resource
win10v2004-20240226-en
Malware Config
Extracted
azorult
http://21slg.xyz/PL341/index.php
Targets
-
-
Target
c62b0f6c44abf03c26dab89826464f74_JaffaCakes118
-
Size
283KB
-
MD5
c62b0f6c44abf03c26dab89826464f74
-
SHA1
9ca8c875e687baa367a35873a85c9916cf3a4c2b
-
SHA256
27c92fe6c131c4f41f6d524837ba073f396130658c51108f94cb514b7f571dc4
-
SHA512
d0b8272134709b5aa04712f04f7f1bf02fca9e377e80ee1956b8134df0197fe7d4e94287146e47a828c89fc201dbb4679b87896153f93261d1a5741c56140a62
-
SSDEEP
6144:PBlL/IkB3YxRxiY0FXe0M6t2BrlkKxXR9vYsfE:pSkB3YxRxMFXY/llR9A1
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/lyinn.dll
-
Size
26KB
-
MD5
b7f9a167c3af210c5a0be8393b9f04e2
-
SHA1
8e540308abf226139bf08c61fa21598c0eb055da
-
SHA256
fd6451ef4e817f604a14be5ab85b5e9890a276ba877d38a9b9544c41ed4718a7
-
SHA512
75a44e8939f23fa143b67fbd664b81758c0718343e7cb3836b5651bd87e0533d03973b34cbb7b03b50a1fb3828fb0ddf93b205f42e0c8198bfb575088dc9b128
-
SSDEEP
384:CWt7vqwJ2B3uyRZ3rcg3b8WWA5oYjH8T9jwiXaqQUfkysX:1sBBH3I6WS78T5FX5fkv
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-