General

  • Target

    1dc4b682b51ffeb07d5761e26fef6843_JaffaCakes118

  • Size

    723KB

  • Sample

    240506-wxflgadc8y

  • MD5

    1dc4b682b51ffeb07d5761e26fef6843

  • SHA1

    7d5818b73a076026d2c53cfb0209cf965ae7e356

  • SHA256

    5398b1b03f040c2146cafba544259804f900dd6a4c8a639c3045a506f261dbae

  • SHA512

    bd756819ebc8a0e08403cbfd2fdcda5a7dce010051385113d92a850cd847f3e2ff86a71485f0ab95a147fde3cd788b6a162bb76981aba68a5d824f786b1e88df

  • SSDEEP

    12288:7z/GgY19HTTZC6nUixuB+IFfdCOJryn3RKZYSbIDIAB0EJ3TpY6A571:XGgY19z9C6puB308y3RaqIABRJDg571

Malware Config

Extracted

Family

azorult

C2

http://lookworld.gdn/panel/l0adam.php

Targets

    • Target

      1dc4b682b51ffeb07d5761e26fef6843_JaffaCakes118

    • Size

      723KB

    • MD5

      1dc4b682b51ffeb07d5761e26fef6843

    • SHA1

      7d5818b73a076026d2c53cfb0209cf965ae7e356

    • SHA256

      5398b1b03f040c2146cafba544259804f900dd6a4c8a639c3045a506f261dbae

    • SHA512

      bd756819ebc8a0e08403cbfd2fdcda5a7dce010051385113d92a850cd847f3e2ff86a71485f0ab95a147fde3cd788b6a162bb76981aba68a5d824f786b1e88df

    • SSDEEP

      12288:7z/GgY19HTTZC6nUixuB+IFfdCOJryn3RKZYSbIDIAB0EJ3TpY6A571:XGgY19z9C6puB308y3RaqIABRJDg571

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Matrix

Tasks