General

  • Target

    3434e1bb482521b94c51ba4c2152b201_JaffaCakes118

  • Size

    337KB

  • Sample

    240511-mxaksaga38

  • MD5

    3434e1bb482521b94c51ba4c2152b201

  • SHA1

    984bc3bf09fb42aa8e8e123adccf5a3d01618775

  • SHA256

    76861d2fc58dd47dbed932d546aa8bf8d1fdf203bad72bca5b44dd91b444b430

  • SHA512

    d8fef9f6d2f247378f914b20e9d93428c60aa2bd5d845c1b17d302b7020651b926fe9c80679a2b5ab96abbdd37c5105df5b3c98878ddce98ee9e53e51eb30217

  • SSDEEP

    3072:7Rx4lr/py/kFg+DIB9asfk3PYme79nDAi5bwI94aqkeBt6DZCz3bdDp:7RyaF1/fJnDNbwW4fRd5p

Malware Config

Extracted

Family

azorult

C2

http://rakaka.om-nom-nom.li/index.php

Targets

    • Target

      3434e1bb482521b94c51ba4c2152b201_JaffaCakes118

    • Size

      337KB

    • MD5

      3434e1bb482521b94c51ba4c2152b201

    • SHA1

      984bc3bf09fb42aa8e8e123adccf5a3d01618775

    • SHA256

      76861d2fc58dd47dbed932d546aa8bf8d1fdf203bad72bca5b44dd91b444b430

    • SHA512

      d8fef9f6d2f247378f914b20e9d93428c60aa2bd5d845c1b17d302b7020651b926fe9c80679a2b5ab96abbdd37c5105df5b3c98878ddce98ee9e53e51eb30217

    • SSDEEP

      3072:7Rx4lr/py/kFg+DIB9asfk3PYme79nDAi5bwI94aqkeBt6DZCz3bdDp:7RyaF1/fJnDNbwW4fRd5p

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Matrix

Tasks