Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
04-05-2024 22:01
General
-
Target
14a96e2b320db6d5e89fd68377c206c2_JaffaCakes118.exe
-
Size
136KB
-
MD5
14a96e2b320db6d5e89fd68377c206c2
-
SHA1
c720d00d79d7c1a0f34eb881b1c456ce71b73c0d
-
SHA256
463f4cf2c603f208253b7422335775d22934a251a84e684374cee6c1be6c626b
-
SHA512
a7cfe2bd35999ad2638b4a9be20ccef58db38178526fb713fba0a94d8ebd98e6c90ce6e040e2159c861537f381da50bb8a0f6563b37a608fb4e925d8ebe3a7d2
-
SSDEEP
3072:FGETFmh2/ST+KwgH8eMJuXDBFYTycga1CdvKssTeTB1inQiFIS9:FGMmhoSTPwbe9DBqcaAqDQiFP9
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://51.15.62.59/AED77D05-A028-477C-B013-04F33F1385C3/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\14a96e2b320db6d5e89fd68377c206c2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\14a96e2b320db6d5e89fd68377c206c2_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
324KB
-
Filesize
1024KB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
324KB