Analysis
-
max time kernel
141s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
08-05-2024 19:03
General
-
Target
2646688ff023d9a8539d3644c446b145_JaffaCakes118.exe
-
Size
223KB
-
MD5
2646688ff023d9a8539d3644c446b145
-
SHA1
775c45746e48b222657137cb4bf27880d374a3f6
-
SHA256
f6bf82298cb97b796f5e78b924cef6d63848765bc6fb9f76cfbd207c76cae60b
-
SHA512
a90eb033db8db1923a8ccc7413fac40b525fcac3843a657d769e976c9e6705369216d1bdfd1cdecb0582a3e2bed2efc4917ae5a3f4577c1acecc64156715fc67
-
SSDEEP
3072:2GeenBa3FNhu7IX/Ot3uUfhNIHYUe83d1L9RAzJijr+75TU6ExT6s5IkLDi6:2P34luULn0RTGU6eiky6
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://hostname.vip/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2646688ff023d9a8539d3644c446b145_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2646688ff023d9a8539d3644c446b145_JaffaCakes118.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1796 -s 13842⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1796 -ip 17961⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
-
Filesize
1024KB
-
Filesize
128KB
-
Filesize
524KB