General
-
Target
fb9f40579e15aadf3bb35ba5ae50e699_JaffaCakes118
-
Size
180KB
-
Sample
240420-bv22gach23
-
MD5
fb9f40579e15aadf3bb35ba5ae50e699
-
SHA1
e7167a140d3ecca9ce5246cc4eb4b1035b7b97a4
-
SHA256
b5f270d150c29d6bd67b08fe0eb7788cfae2973c60619ea3596a25cbd4d945ae
-
SHA512
c4e8e5d1a0159468c677f9738d8ff9de473147219c008a7397b7f2f33077314b73a3f68d5d758f4914e725760b90e56e1844059e4a680efd1f6d410de2f0cfc3
-
SSDEEP
3072:mAMUGa9SbMLbsby6CCh2z2B8zkku3t6amYBD+jva05V:oljbMLbk2Qk0EP5V
Static task
static1
Behavioral task
behavioral1
Sample
fb9f40579e15aadf3bb35ba5ae50e699_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb9f40579e15aadf3bb35ba5ae50e699_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
azorult
http://grekos.site/concordia/index.php
Targets
-
-
Target
fb9f40579e15aadf3bb35ba5ae50e699_JaffaCakes118
-
Size
180KB
-
MD5
fb9f40579e15aadf3bb35ba5ae50e699
-
SHA1
e7167a140d3ecca9ce5246cc4eb4b1035b7b97a4
-
SHA256
b5f270d150c29d6bd67b08fe0eb7788cfae2973c60619ea3596a25cbd4d945ae
-
SHA512
c4e8e5d1a0159468c677f9738d8ff9de473147219c008a7397b7f2f33077314b73a3f68d5d758f4914e725760b90e56e1844059e4a680efd1f6d410de2f0cfc3
-
SSDEEP
3072:mAMUGa9SbMLbsby6CCh2z2B8zkku3t6amYBD+jva05V:oljbMLbk2Qk0EP5V
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-