General
-
Target
3434e1bb482521b94c51ba4c2152b201_JaffaCakes118
-
Size
337KB
-
Sample
240511-mxaksaga38
-
MD5
3434e1bb482521b94c51ba4c2152b201
-
SHA1
984bc3bf09fb42aa8e8e123adccf5a3d01618775
-
SHA256
76861d2fc58dd47dbed932d546aa8bf8d1fdf203bad72bca5b44dd91b444b430
-
SHA512
d8fef9f6d2f247378f914b20e9d93428c60aa2bd5d845c1b17d302b7020651b926fe9c80679a2b5ab96abbdd37c5105df5b3c98878ddce98ee9e53e51eb30217
-
SSDEEP
3072:7Rx4lr/py/kFg+DIB9asfk3PYme79nDAi5bwI94aqkeBt6DZCz3bdDp:7RyaF1/fJnDNbwW4fRd5p
Static task
static1
Behavioral task
behavioral1
Sample
3434e1bb482521b94c51ba4c2152b201_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3434e1bb482521b94c51ba4c2152b201_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
azorult
http://rakaka.om-nom-nom.li/index.php
Targets
-
-
Target
3434e1bb482521b94c51ba4c2152b201_JaffaCakes118
-
Size
337KB
-
MD5
3434e1bb482521b94c51ba4c2152b201
-
SHA1
984bc3bf09fb42aa8e8e123adccf5a3d01618775
-
SHA256
76861d2fc58dd47dbed932d546aa8bf8d1fdf203bad72bca5b44dd91b444b430
-
SHA512
d8fef9f6d2f247378f914b20e9d93428c60aa2bd5d845c1b17d302b7020651b926fe9c80679a2b5ab96abbdd37c5105df5b3c98878ddce98ee9e53e51eb30217
-
SSDEEP
3072:7Rx4lr/py/kFg+DIB9asfk3PYme79nDAi5bwI94aqkeBt6DZCz3bdDp:7RyaF1/fJnDNbwW4fRd5p
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-