Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
13-05-2024 13:46
General
-
Target
3fc3a33162880703e46a0abbb9468a93_JaffaCakes118.exe
-
Size
202KB
-
MD5
3fc3a33162880703e46a0abbb9468a93
-
SHA1
c4ff868c4a9f8154247e663ca0b4411272107a3b
-
SHA256
ac35e6dd6a4cd4d3c65f55e3d3044b150049a8b164ab608d4883f8c7cc3610a7
-
SHA512
3e042fc29bfcc5dfd6affa5d7622d5190aa4b4d655d8856083505b900a8d41e2013d0fd9c56f0bdd6d4c3a40076dd70c610bfebb6e045b95ea576b925786a01c
-
SSDEEP
3072:gj7c1k1NGwbAXogCDnflraLERhdZ06gXHdhSSOkw5gBh:4i0AXog+lTlZOXL5O+z
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://217.8.117.235/8A16F818-E5A3-49AE-BF99-250E1F00B04E/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3fc3a33162880703e46a0abbb9468a93_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3fc3a33162880703e46a0abbb9468a93_JaffaCakes118.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4808 -s 14282⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 4808 -ip 48081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
128KB
-
Filesize
488KB
-
Filesize
128KB