Overview

overview

10

Static

static

10

e7a59122d6...18.exe

windows7-x64

10

e7a59122d6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7a59122d693804432525ec613a81e8d_JaffaCakes118

  • Size

    568KB

  • Sample

    240408-rjrz5aed4y

  • MD5

    e7a59122d693804432525ec613a81e8d

  • SHA1

    3e74df16d4ef11f2cfa9e7c42d5ca74850acd14b

  • SHA256

    0aa073f803751232d5a4157156ff58c220898cdf2c729a55fd611ba95bffdb00

  • SHA512

    2a9bdfac7ee54d70682b5bd157320e0b872393e6c6ad96d8d9e7eb584efedc4fda9a271d2e1bc7390d6e2aed8c60ed8e22e5ee7bf238fb86cb2fc56555d42803

  • SSDEEP

    12288:L6sTkBisgC7vTNgV7w1yS9GSkOkCP7r9r/+ppppppppppppppppppppppppppppd:ODwsN7KVwjGSNZ1q

Score
10/10
azorultzgratinfostealerrattrojan

Malware Config

Extracted

Family

azorult

C2

http://203.159.80.118/PL341/index.php

Targets

    • Target

      e7a59122d693804432525ec613a81e8d_JaffaCakes118

    • Size

      568KB

    • MD5

      e7a59122d693804432525ec613a81e8d

    • SHA1

      3e74df16d4ef11f2cfa9e7c42d5ca74850acd14b

    • SHA256

      0aa073f803751232d5a4157156ff58c220898cdf2c729a55fd611ba95bffdb00

    • SHA512

      2a9bdfac7ee54d70682b5bd157320e0b872393e6c6ad96d8d9e7eb584efedc4fda9a271d2e1bc7390d6e2aed8c60ed8e22e5ee7bf238fb86cb2fc56555d42803

    • SSDEEP

      12288:L6sTkBisgC7vTNgV7w1yS9GSkOkCP7r9r/+ppppppppppppppppppppppppppppd:ODwsN7KVwjGSNZ1q

    Score
    10/10
    azorultzgratinfostealerrattrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks