General

  • Target

    f98399c21666ab44ffe10da4e3326546_JaffaCakes118

  • Size

    353KB

  • Sample

    240419-e6shyshh9y

  • MD5

    f98399c21666ab44ffe10da4e3326546

  • SHA1

    9aab0059b86f437c987e437dfec661ecf7fa22e6

  • SHA256

    1ca8a6eb97e3bdc6632c0f4263c759a2a2b0b65c765bdb57437312f509452ce7

  • SHA512

    74f550d180b51df18478d2f70be43fda4f13f1e820ab4d560f9e669b505e29354e4f75762de4959a6446cc82e4b2a01600a5010e9ada8727d0a86248a4695145

  • SSDEEP

    6144:RqFQsTyzSawiMDgvm41cN9gL+cD815ua33Gk3DY:GnTyQ5E1cXXTua33BD

Malware Config

Extracted

Family

azorult

C2

http://37.0.10.99/PL341/index.php

Targets

    • Target

      f98399c21666ab44ffe10da4e3326546_JaffaCakes118

    • Size

      353KB

    • MD5

      f98399c21666ab44ffe10da4e3326546

    • SHA1

      9aab0059b86f437c987e437dfec661ecf7fa22e6

    • SHA256

      1ca8a6eb97e3bdc6632c0f4263c759a2a2b0b65c765bdb57437312f509452ce7

    • SHA512

      74f550d180b51df18478d2f70be43fda4f13f1e820ab4d560f9e669b505e29354e4f75762de4959a6446cc82e4b2a01600a5010e9ada8727d0a86248a4695145

    • SSDEEP

      6144:RqFQsTyzSawiMDgvm41cN9gL+cD815ua33Gk3DY:GnTyQ5E1cXXTua33BD

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks