Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
29-04-2024 19:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe
-
Size
141KB
-
MD5
086ad72464c81ec4d085884aa9c907a3
-
SHA1
302439b844d811e1edbb5b96a4716dfaa5b6ad3f
-
SHA256
484df75609f0617fa19580c4572f21bbef0f3861c803a100774084b805c7544b
-
SHA512
b7272bf4bde47e669356ca1118c1f0a56c9a1e47c9e26e72764f23c6af126338451342da4eb89196ef01192649c737aa9b9161e8fe63458178a72aeda9b11d55
-
SSDEEP
3072:nPACH0VQkWZ67j82BJwV5Hym4NAw6EtaO8RFf6GmuoOCs2uMRjHK:nJZWTNJz83C3DOC8M1q
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://cg78822.tmweb.ru/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of AdjustPrivilegeToken 60 IoCs
description pid Process Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1684 086ad72464c81ec4d085884aa9c907a3_JaffaCakes118.exe