Overview

overview

10

Static

static

7

14a96e2b32...18.exe

windows7-x64

10

14a96e2b32...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14a96e2b320db6d5e89fd68377c206c2_JaffaCakes118

  • Size

    136KB

  • Sample

    240504-1w9kdace8y

  • MD5

    14a96e2b320db6d5e89fd68377c206c2

  • SHA1

    c720d00d79d7c1a0f34eb881b1c456ce71b73c0d

  • SHA256

    463f4cf2c603f208253b7422335775d22934a251a84e684374cee6c1be6c626b

  • SHA512

    a7cfe2bd35999ad2638b4a9be20ccef58db38178526fb713fba0a94d8ebd98e6c90ce6e040e2159c861537f381da50bb8a0f6563b37a608fb4e925d8ebe3a7d2

  • SSDEEP

    3072:FGETFmh2/ST+KwgH8eMJuXDBFYTycga1CdvKssTeTB1inQiFIS9:FGMmhoSTPwbe9DBqcaAqDQiFP9

Score
10/10
azorultinfostealertrojanupx

Malware Config

Extracted

Family

azorult

C2

http://51.15.62.59/AED77D05-A028-477C-B013-04F33F1385C3/index.php

Targets

    • Target

      14a96e2b320db6d5e89fd68377c206c2_JaffaCakes118

    • Size

      136KB

    • MD5

      14a96e2b320db6d5e89fd68377c206c2

    • SHA1

      c720d00d79d7c1a0f34eb881b1c456ce71b73c0d

    • SHA256

      463f4cf2c603f208253b7422335775d22934a251a84e684374cee6c1be6c626b

    • SHA512

      a7cfe2bd35999ad2638b4a9be20ccef58db38178526fb713fba0a94d8ebd98e6c90ce6e040e2159c861537f381da50bb8a0f6563b37a608fb4e925d8ebe3a7d2

    • SSDEEP

      3072:FGETFmh2/ST+KwgH8eMJuXDBFYTycga1CdvKssTeTB1inQiFIS9:FGMmhoSTPwbe9DBqcaAqDQiFP9

    Score
    10/10
    azorultinfostealertrojanupx

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks