Overview

overview

10

Static

static

3

3af928b8c8...18.exe

windows7-x64

10

3af928b8c8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3af928b8c8ff9993e7567360d26275e6_JaffaCakes118

  • Size

    714KB

  • Sample

    240512-tm84xsdg3t

  • MD5

    3af928b8c8ff9993e7567360d26275e6

  • SHA1

    b3a79f4b6fa9f4bcc4c8bab8b6eda8df3b0f0ee0

  • SHA256

    1206ddd174f5df61f70259ac6da12226590232dd5f70d3139aa290d381efecbe

  • SHA512

    9ef73554db5164ec5944b493d555e93182b0945f2f2a6a19e80b7598fe7b65a2f8a1dc4c3a09858683d8c38233af0763f4c68a9a5ff294420ed75b9a59e7ed87

  • SSDEEP

    12288:/cFUncJ54irus265GoqlDX1YH0COI+w7Ror6PpGg+l2K3RYUOQmT/3iJusPIW6F:lnYnuRcBIoGblBhk/qIX

Score
10/10
azorultinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://207.154.240.23/index.php

Targets

    • Target

      3af928b8c8ff9993e7567360d26275e6_JaffaCakes118

    • Size

      714KB

    • MD5

      3af928b8c8ff9993e7567360d26275e6

    • SHA1

      b3a79f4b6fa9f4bcc4c8bab8b6eda8df3b0f0ee0

    • SHA256

      1206ddd174f5df61f70259ac6da12226590232dd5f70d3139aa290d381efecbe

    • SHA512

      9ef73554db5164ec5944b493d555e93182b0945f2f2a6a19e80b7598fe7b65a2f8a1dc4c3a09858683d8c38233af0763f4c68a9a5ff294420ed75b9a59e7ed87

    • SSDEEP

      12288:/cFUncJ54irus265GoqlDX1YH0COI+w7Ror6PpGg+l2K3RYUOQmT/3iJusPIW6F:lnYnuRcBIoGblBhk/qIX

    Score
    10/10
    azorultinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks