General
-
Target
0e058b28ee7d0973bef985ec9a06a4cb_JaffaCakes118
-
Size
1.7MB
-
Sample
240502-klhe5sdd3z
-
MD5
0e058b28ee7d0973bef985ec9a06a4cb
-
SHA1
422c3807fe34196d35ab45c7ae0ea6cd1640c6ca
-
SHA256
06d5ea0f1d275963db09cd90ba5c7e0790bb52a4da343250acddbebab29a96bb
-
SHA512
e43f7daf9e52c5c4214ec789faff4811bcac57371d8b5da708a1878ffae7413d9855b851fe112d5c67592c178a3c90ccb181f100972e21d901939780d70145ae
-
SSDEEP
24576:boQeYzZwfvCyz63zzrDnzQT3wtnMCzmEMI4Wip:Xe0wfvD
Static task
static1
Behavioral task
behavioral1
Sample
0e058b28ee7d0973bef985ec9a06a4cb_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0e058b28ee7d0973bef985ec9a06a4cb_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
azorult
http://bzlogi.tk/index.php
Targets
-
-
Target
0e058b28ee7d0973bef985ec9a06a4cb_JaffaCakes118
-
Size
1.7MB
-
MD5
0e058b28ee7d0973bef985ec9a06a4cb
-
SHA1
422c3807fe34196d35ab45c7ae0ea6cd1640c6ca
-
SHA256
06d5ea0f1d275963db09cd90ba5c7e0790bb52a4da343250acddbebab29a96bb
-
SHA512
e43f7daf9e52c5c4214ec789faff4811bcac57371d8b5da708a1878ffae7413d9855b851fe112d5c67592c178a3c90ccb181f100972e21d901939780d70145ae
-
SSDEEP
24576:boQeYzZwfvCyz63zzrDnzQT3wtnMCzmEMI4Wip:Xe0wfvD
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-