General
-
Target
f98399c21666ab44ffe10da4e3326546_JaffaCakes118
-
Size
353KB
-
Sample
240419-e6shyshh9y
-
MD5
f98399c21666ab44ffe10da4e3326546
-
SHA1
9aab0059b86f437c987e437dfec661ecf7fa22e6
-
SHA256
1ca8a6eb97e3bdc6632c0f4263c759a2a2b0b65c765bdb57437312f509452ce7
-
SHA512
74f550d180b51df18478d2f70be43fda4f13f1e820ab4d560f9e669b505e29354e4f75762de4959a6446cc82e4b2a01600a5010e9ada8727d0a86248a4695145
-
SSDEEP
6144:RqFQsTyzSawiMDgvm41cN9gL+cD815ua33Gk3DY:GnTyQ5E1cXXTua33BD
Behavioral task
behavioral1
Sample
f98399c21666ab44ffe10da4e3326546_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f98399c21666ab44ffe10da4e3326546_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
azorult
http://37.0.10.99/PL341/index.php
Targets
-
-
Target
f98399c21666ab44ffe10da4e3326546_JaffaCakes118
-
Size
353KB
-
MD5
f98399c21666ab44ffe10da4e3326546
-
SHA1
9aab0059b86f437c987e437dfec661ecf7fa22e6
-
SHA256
1ca8a6eb97e3bdc6632c0f4263c759a2a2b0b65c765bdb57437312f509452ce7
-
SHA512
74f550d180b51df18478d2f70be43fda4f13f1e820ab4d560f9e669b505e29354e4f75762de4959a6446cc82e4b2a01600a5010e9ada8727d0a86248a4695145
-
SSDEEP
6144:RqFQsTyzSawiMDgvm41cN9gL+cD815ua33Gk3DY:GnTyQ5E1cXXTua33BD
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Detect ZGRat V1
-
Suspicious use of SetThreadContext
-