General

  • Target

    146b8da7c681b41a276e80a20d436574_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240504-zkn9maag8z

  • MD5

    146b8da7c681b41a276e80a20d436574

  • SHA1

    45b0be60ddc4ea432206725a3b2f7b9bd7399575

  • SHA256

    c0e83fa05deab42ffb48d769716375b13eb97549d5edecdba90e31fd19f67a0c

  • SHA512

    cd95eed7012fbd41667e77a68d751588e951fb731d32425647ce2c5dba5ed924230a504c7ffa72d02461e78e0114b64baea8070f636d451d10751f0b1791706e

  • SSDEEP

    24576:Wu6J33O0c+JY5UZ+XC0kGso6FamiP83wV6CpTstOgn8EWYkj:4u0c++OCvkGs9FamGIC5j/Yw

Malware Config

Extracted

Family

azorult

C2

http://googletime.ug/index.php

Targets

    • Target

      146b8da7c681b41a276e80a20d436574_JaffaCakes118

    • Size

      1.3MB

    • MD5

      146b8da7c681b41a276e80a20d436574

    • SHA1

      45b0be60ddc4ea432206725a3b2f7b9bd7399575

    • SHA256

      c0e83fa05deab42ffb48d769716375b13eb97549d5edecdba90e31fd19f67a0c

    • SHA512

      cd95eed7012fbd41667e77a68d751588e951fb731d32425647ce2c5dba5ed924230a504c7ffa72d02461e78e0114b64baea8070f636d451d10751f0b1791706e

    • SSDEEP

      24576:Wu6J33O0c+JY5UZ+XC0kGso6FamiP83wV6CpTstOgn8EWYkj:4u0c++OCvkGs9FamGIC5j/Yw

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks