Overview

overview

10

Static

static

3

03a60209be...18.exe

windows7-x64

10

03a60209be...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03a60209be11422ac49e7be8795b10fa_JaffaCakes118

  • Size

    811KB

  • Sample

    240427-z5jvmsgf89

  • MD5

    03a60209be11422ac49e7be8795b10fa

  • SHA1

    4d0107218a8d848fc246dd35e1ecdd5f4bfb76c2

  • SHA256

    0f730dd39b55f607d86a2b6682b1e9a622133c7e227ccd0c3d449760f68a6d74

  • SHA512

    3bed1c1554036c76f3cc32b5e1439b9ff322e695a93c5e8c5090d410baceb2115e6c2c3de442dfef7d4874bdb812b4a8d6aac817e5ce9324caaaef01a668f9a0

  • SSDEEP

    12288:/b6mCM9sXHh9BoRPqsxOVKuS5r70xwgeqh043L97/hOiwvr+8WrA7rY/TymrhC:2eSHhYRRxOVGcxJBdb1s68WEY2b

Score
10/10
azorultinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://ciuj.ir/showmoney/index.php

Targets

    • Target

      03a60209be11422ac49e7be8795b10fa_JaffaCakes118

    • Size

      811KB

    • MD5

      03a60209be11422ac49e7be8795b10fa

    • SHA1

      4d0107218a8d848fc246dd35e1ecdd5f4bfb76c2

    • SHA256

      0f730dd39b55f607d86a2b6682b1e9a622133c7e227ccd0c3d449760f68a6d74

    • SHA512

      3bed1c1554036c76f3cc32b5e1439b9ff322e695a93c5e8c5090d410baceb2115e6c2c3de442dfef7d4874bdb812b4a8d6aac817e5ce9324caaaef01a668f9a0

    • SSDEEP

      12288:/b6mCM9sXHh9BoRPqsxOVKuS5r70xwgeqh043L97/hOiwvr+8WrA7rY/TymrhC:2eSHhYRRxOVGcxJBdb1s68WEY2b

    Score
    10/10
    azorultinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks