General
-
Target
18534b414b5ef9c8ee854105f6690b2c_JaffaCakes118
-
Size
747KB
-
Sample
240505-s3sw7shb52
-
MD5
18534b414b5ef9c8ee854105f6690b2c
-
SHA1
60506c7caede79201802d79704d6d6274bca49df
-
SHA256
352d82212272193e0a9c92d576f5cde4622ef7d9397b2051dbebb7636dae54ee
-
SHA512
caae9e37387b8396b50ca3ff37d2f52d3584556d79d574998d1d73e995d1504c0c4ecddb4c85f15597bb5ba33d676aa96d30d68e2cc5441b8037c7e9d9257d1d
-
SSDEEP
12288:KUFq7iXiFvvt65QyWYoNacf+8U7zyC2vnzApSBT/o+c:P+iqtUWYZM4Hytfz5N
Static task
static1
Behavioral task
behavioral1
Sample
18534b414b5ef9c8ee854105f6690b2c_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
18534b414b5ef9c8ee854105f6690b2c_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
azorult
http://googletime.ac.ug/indexindex.php
Targets
-
-
Target
18534b414b5ef9c8ee854105f6690b2c_JaffaCakes118
-
Size
747KB
-
MD5
18534b414b5ef9c8ee854105f6690b2c
-
SHA1
60506c7caede79201802d79704d6d6274bca49df
-
SHA256
352d82212272193e0a9c92d576f5cde4622ef7d9397b2051dbebb7636dae54ee
-
SHA512
caae9e37387b8396b50ca3ff37d2f52d3584556d79d574998d1d73e995d1504c0c4ecddb4c85f15597bb5ba33d676aa96d30d68e2cc5441b8037c7e9d9257d1d
-
SSDEEP
12288:KUFq7iXiFvvt65QyWYoNacf+8U7zyC2vnzApSBT/o+c:P+iqtUWYZM4Hytfz5N
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-