General
-
Target
126dc3cb3bb98900e909476b955e192d_JaffaCakes118
-
Size
1.0MB
-
Sample
240504-m3qh7abh7t
-
MD5
126dc3cb3bb98900e909476b955e192d
-
SHA1
1690010021fb25ffbb3c30f108b0c6bf00a6bb03
-
SHA256
8d19e61c0ad1199769a311aac2434dc684b32b3a7781c01eeecff12fff6eadfd
-
SHA512
d232bd9ec17f31954af540ea5df87fac78658b0b3e843ecccaa871d6f79bded1ef9e3aa69ac90052682bcfebe0266ab0fd5f3afb99cb41ef02b7c07bf6038fec
-
SSDEEP
24576:jF6yDgwTwbRZ8NfjTC8YnvovoP5PIUmkpk8czQB:jF6l6sv/KNS
Static task
static1
Behavioral task
behavioral1
Sample
126dc3cb3bb98900e909476b955e192d_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
126dc3cb3bb98900e909476b955e192d_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
azorult
http://5.101.78.169/index.php
Targets
-
-
Target
126dc3cb3bb98900e909476b955e192d_JaffaCakes118
-
Size
1.0MB
-
MD5
126dc3cb3bb98900e909476b955e192d
-
SHA1
1690010021fb25ffbb3c30f108b0c6bf00a6bb03
-
SHA256
8d19e61c0ad1199769a311aac2434dc684b32b3a7781c01eeecff12fff6eadfd
-
SHA512
d232bd9ec17f31954af540ea5df87fac78658b0b3e843ecccaa871d6f79bded1ef9e3aa69ac90052682bcfebe0266ab0fd5f3afb99cb41ef02b7c07bf6038fec
-
SSDEEP
24576:jF6yDgwTwbRZ8NfjTC8YnvovoP5PIUmkpk8czQB:jF6l6sv/KNS
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-