General

  • Target

    18534b414b5ef9c8ee854105f6690b2c_JaffaCakes118

  • Size

    747KB

  • Sample

    240505-s3sw7shb52

  • MD5

    18534b414b5ef9c8ee854105f6690b2c

  • SHA1

    60506c7caede79201802d79704d6d6274bca49df

  • SHA256

    352d82212272193e0a9c92d576f5cde4622ef7d9397b2051dbebb7636dae54ee

  • SHA512

    caae9e37387b8396b50ca3ff37d2f52d3584556d79d574998d1d73e995d1504c0c4ecddb4c85f15597bb5ba33d676aa96d30d68e2cc5441b8037c7e9d9257d1d

  • SSDEEP

    12288:KUFq7iXiFvvt65QyWYoNacf+8U7zyC2vnzApSBT/o+c:P+iqtUWYZM4Hytfz5N

Malware Config

Extracted

Family

azorult

C2

http://googletime.ac.ug/indexindex.php

Targets

    • Target

      18534b414b5ef9c8ee854105f6690b2c_JaffaCakes118

    • Size

      747KB

    • MD5

      18534b414b5ef9c8ee854105f6690b2c

    • SHA1

      60506c7caede79201802d79704d6d6274bca49df

    • SHA256

      352d82212272193e0a9c92d576f5cde4622ef7d9397b2051dbebb7636dae54ee

    • SHA512

      caae9e37387b8396b50ca3ff37d2f52d3584556d79d574998d1d73e995d1504c0c4ecddb4c85f15597bb5ba33d676aa96d30d68e2cc5441b8037c7e9d9257d1d

    • SSDEEP

      12288:KUFq7iXiFvvt65QyWYoNacf+8U7zyC2vnzApSBT/o+c:P+iqtUWYZM4Hytfz5N

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks