General

  • Target

    2cd8d32820e993ababc07d1a59db1227_JaffaCakes118

  • Size

    200KB

  • Sample

    240510-cn5dpagd28

  • MD5

    2cd8d32820e993ababc07d1a59db1227

  • SHA1

    1535636eb970e7d7c134c1fe26b4f79618e94599

  • SHA256

    9f876e038d4bd25b41781469fbe7f3daa4f0f7a306b26d34dda2a428c1e6f78b

  • SHA512

    d74fb801ab9de94af9dd4861230d55f5d05e3cde45758c84d630159a38410e53ab0cdf7e4af2bc15cbc477c3ba27f8aa87c964a1f9b5f1c57415d8a702afdbc5

  • SSDEEP

    3072:kxEHAGE7NWw22QcAg8Kehx81W09Pl5+kocPHEe6533EVYV7R+:kxEHAfww2rdhx8wKl8kol5E

Malware Config

Extracted

Family

azorult

C2

http://omgitsrobertinopol.org/index.php

Targets

    • Target

      2cd8d32820e993ababc07d1a59db1227_JaffaCakes118

    • Size

      200KB

    • MD5

      2cd8d32820e993ababc07d1a59db1227

    • SHA1

      1535636eb970e7d7c134c1fe26b4f79618e94599

    • SHA256

      9f876e038d4bd25b41781469fbe7f3daa4f0f7a306b26d34dda2a428c1e6f78b

    • SHA512

      d74fb801ab9de94af9dd4861230d55f5d05e3cde45758c84d630159a38410e53ab0cdf7e4af2bc15cbc477c3ba27f8aa87c964a1f9b5f1c57415d8a702afdbc5

    • SSDEEP

      3072:kxEHAGE7NWw22QcAg8Kehx81W09Pl5+kocPHEe6533EVYV7R+:kxEHAfww2rdhx8wKl8kol5E

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Matrix

Tasks