General
-
Target
2f4f27acfae56f146ba7393a8fc887f0_JaffaCakes118
-
Size
221KB
-
Sample
240510-qln6ksbh46
-
MD5
2f4f27acfae56f146ba7393a8fc887f0
-
SHA1
566da5138de6eb3b8b861e34d97257b7aec7694e
-
SHA256
a013e5b6e43bc4750717d163538acbdbba5723d3a558824a8858242284be2881
-
SHA512
9e7df640fc6dbdd1fc6d7b266a2a5d44ec244fc82bf717649a5d527b69a141dffc409cd82835463e5a6f5c24a95ed248fc2068cd2eb90655bc18ff39de4d0c3e
-
SSDEEP
3072:1hr+qQIVD6v5T8m5bIEyrVJJ3DgKLZXTRncOLPiKTyRGcpSO2PfT:1hKqLVD2wrF3DHVXTJcOLPioWDu
Static task
static1
Behavioral task
behavioral1
Sample
2f4f27acfae56f146ba7393a8fc887f0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2f4f27acfae56f146ba7393a8fc887f0_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
azorult
http://gtfurobertopol.org/index.php
Targets
-
-
Target
2f4f27acfae56f146ba7393a8fc887f0_JaffaCakes118
-
Size
221KB
-
MD5
2f4f27acfae56f146ba7393a8fc887f0
-
SHA1
566da5138de6eb3b8b861e34d97257b7aec7694e
-
SHA256
a013e5b6e43bc4750717d163538acbdbba5723d3a558824a8858242284be2881
-
SHA512
9e7df640fc6dbdd1fc6d7b266a2a5d44ec244fc82bf717649a5d527b69a141dffc409cd82835463e5a6f5c24a95ed248fc2068cd2eb90655bc18ff39de4d0c3e
-
SSDEEP
3072:1hr+qQIVD6v5T8m5bIEyrVJJ3DgKLZXTRncOLPiKTyRGcpSO2PfT:1hKqLVD2wrF3DHVXTJcOLPioWDu
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-