azorult | be8bbdc35051ed7a5a6559015576925da47d1c95484f43fd817c6fc8ac22870d | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06-05-2024 03:44

Sharing

Report Analysis Logs

General

Target

1a9adb7d7296a32bf60c18c9a061b8e4_JaffaCakes118.exe
Size

263KB
MD5

1a9adb7d7296a32bf60c18c9a061b8e4
SHA1

62fa996108c89c4c306e0a6f6b1186235799b219
SHA256

be8bbdc35051ed7a5a6559015576925da47d1c95484f43fd817c6fc8ac22870d
SHA512

5e64ee677813244080ad8d2203a17d3cbc30ceba41dcc82e9c6aaf5e225d5f5beb8bf3781cf6ccb5145482cec7a0e30e9524183565074d038629e342f2006a92
SSDEEP

3072:eCRiNytdviZQezPJyqS1A/R0yBWYraiqBo0foipwZ81wlIE9qFuN:eCRX2QSPJPHmyBUBkipwuFK

Score

10^/10

azorult infostealer trojan

Malware Config

Extracted

Family

azorult

C2

http://tuscano.ug/index.php

Signatures

Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
trojan infostealer azorult

C:\Users\Admin\AppData\Local\Temp\1a9adb7d7296a32bf60c18c9a061b8e4_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1a9adb7d7296a32bf60c18c9a061b8e4_JaffaCakes118.exe"
1⤵
PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2972-1-0x0000000003710000-0x0000000003810000-memory.dmp

Filesize
1024KB

Download
memory/2972-2-0x0000000000020000-0x000000000003D000-memory.dmp

Filesize
116KB

Download
memory/2972-3-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/2972-6-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/2972-5-0x0000000003710000-0x0000000003810000-memory.dmp

Filesize
1024KB

Download
memory/2972-4-0x0000000000400000-0x0000000003597000-memory.dmp

Filesize
49.6MB

Download