General

  • Target

    0e058b28ee7d0973bef985ec9a06a4cb_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240502-klhe5sdd3z

  • MD5

    0e058b28ee7d0973bef985ec9a06a4cb

  • SHA1

    422c3807fe34196d35ab45c7ae0ea6cd1640c6ca

  • SHA256

    06d5ea0f1d275963db09cd90ba5c7e0790bb52a4da343250acddbebab29a96bb

  • SHA512

    e43f7daf9e52c5c4214ec789faff4811bcac57371d8b5da708a1878ffae7413d9855b851fe112d5c67592c178a3c90ccb181f100972e21d901939780d70145ae

  • SSDEEP

    24576:boQeYzZwfvCyz63zzrDnzQT3wtnMCzmEMI4Wip:Xe0wfvD

Malware Config

Extracted

Family

azorult

C2

http://bzlogi.tk/index.php

Targets

    • Target

      0e058b28ee7d0973bef985ec9a06a4cb_JaffaCakes118

    • Size

      1.7MB

    • MD5

      0e058b28ee7d0973bef985ec9a06a4cb

    • SHA1

      422c3807fe34196d35ab45c7ae0ea6cd1640c6ca

    • SHA256

      06d5ea0f1d275963db09cd90ba5c7e0790bb52a4da343250acddbebab29a96bb

    • SHA512

      e43f7daf9e52c5c4214ec789faff4811bcac57371d8b5da708a1878ffae7413d9855b851fe112d5c67592c178a3c90ccb181f100972e21d901939780d70145ae

    • SSDEEP

      24576:boQeYzZwfvCyz63zzrDnzQT3wtnMCzmEMI4Wip:Xe0wfvD

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks