Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-05-2024 18:28

General

  • Target

    3c3450eff8c5bdc479070df05827215b_JaffaCakes118.exe

  • Size

    186KB

  • MD5

    3c3450eff8c5bdc479070df05827215b

  • SHA1

    8d46d8ff50138c035196697d4d362df5271a0d6b

  • SHA256

    b46e446b0b7642b3e0dbfb7189e7e90101ecb36192c10058568c6977f37d4d95

  • SHA512

    c85b4618de2526a9819cc1d65111b5e8840cbd3c06f7f8f17289f0faa58e7b001e2194c5e845805ce7b4d7c2905bf628b5cd0f7b98d02c2d39779d47210b0f3d

  • SSDEEP

    3072:aRLoaBFWb5AW+CdMNu30OGjSyJkN9LjkrJkfDss:aRb0+mIu3BGjSy2f/k1kf

Malware Config

Signatures

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

Processes

  • C:\Users\Admin\AppData\Local\Temp\3c3450eff8c5bdc479070df05827215b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3c3450eff8c5bdc479070df05827215b_JaffaCakes118.exe"
    1⤵
      PID:2036

    Network

      No results found
    • 185.244.217.150:80
      3c3450eff8c5bdc479070df05827215b_JaffaCakes118.exe
      152 B
      3
    • 185.244.217.150:80
      3c3450eff8c5bdc479070df05827215b_JaffaCakes118.exe
      152 B
      3
    • 185.244.217.150:80
      3c3450eff8c5bdc479070df05827215b_JaffaCakes118.exe
      152 B
      3
    No results found

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2036-1-0x00000000004B0000-0x00000000005B0000-memory.dmp

      Filesize

      1024KB

    • memory/2036-2-0x0000000000400000-0x0000000000420000-memory.dmp

      Filesize

      128KB

    • memory/2036-3-0x0000000000400000-0x0000000000435000-memory.dmp

      Filesize

      212KB

    • memory/2036-5-0x00000000004B0000-0x00000000005B0000-memory.dmp

      Filesize

      1024KB

    • memory/2036-6-0x0000000000400000-0x0000000000420000-memory.dmp

      Filesize

      128KB

    • memory/2036-9-0x0000000000400000-0x0000000000435000-memory.dmp

      Filesize

      212KB

    • memory/2036-11-0x0000000000400000-0x0000000000435000-memory.dmp

      Filesize

      212KB

    • memory/2036-12-0x0000000000400000-0x0000000000420000-memory.dmp

      Filesize

      128KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.