General

  • Target

    253f2634f49b429623ee33b9523d05bd_JaffaCakes118

  • Size

    162KB

  • Sample

    240508-rpg24sgg2v

  • MD5

    253f2634f49b429623ee33b9523d05bd

  • SHA1

    efab3a443f5aa931dbbcad6ef0a1aae3f83dd90e

  • SHA256

    fe7e3ce36c54f630e0047680c8878bf618568e5e4c22b36ae4c283ddc608c3d8

  • SHA512

    fe4eb06cfbbf8d4028bee82c3985d961b24cd5628172080a8e3686dd7b4616067359f08328eea3a0eeacff9be32843515b0a8caeaca51fcdde4c4c9ce66ee602

  • SSDEEP

    3072:aKyX0uho/5Fywx0S4os5W+si+dnktV8Ce+eYyRu16muk/Tfajgqnxd:a5k5FPzx+R+utj7yk162CjJ

Malware Config

Extracted

Family

azorult

C2

http://51.15.62.59/AED77D05-A028-477C-B013-04F33F1385C3/index.php

Targets

    • Target

      253f2634f49b429623ee33b9523d05bd_JaffaCakes118

    • Size

      162KB

    • MD5

      253f2634f49b429623ee33b9523d05bd

    • SHA1

      efab3a443f5aa931dbbcad6ef0a1aae3f83dd90e

    • SHA256

      fe7e3ce36c54f630e0047680c8878bf618568e5e4c22b36ae4c283ddc608c3d8

    • SHA512

      fe4eb06cfbbf8d4028bee82c3985d961b24cd5628172080a8e3686dd7b4616067359f08328eea3a0eeacff9be32843515b0a8caeaca51fcdde4c4c9ce66ee602

    • SSDEEP

      3072:aKyX0uho/5Fywx0S4os5W+si+dnktV8Ce+eYyRu16muk/Tfajgqnxd:a5k5FPzx+R+utj7yk162CjJ

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks