General

  • Target

    3d7e0748f65f6d55887fab28de98bbde_JaffaCakes118

  • Size

    345KB

  • Sample

    240514-chq9wafd65

  • MD5

    3d7e0748f65f6d55887fab28de98bbde

  • SHA1

    0700ff40bde7331b2145839e2d3f53d2281b0c29

  • SHA256

    2accfbc3e93bbfde22d833a6e3d8b5a53b3e8d2f6d38ab3e2bfb86fa2cb7a196

  • SHA512

    0b9df3e0eca4b49604e61f3c131a9a57744e65baa4d0a4acd4e45159e20fb0924ba268c964d90a72d2fb646a2b15000526c2c5924acf9202682675becf26be23

  • SSDEEP

    6144:lWKjIfJveskxogPcqCyA+D7v3JM+RKusJ7S7tGYIqt8jN8:bjIfQXxvCyAEb3JWJ+xai

Malware Config

Extracted

Family

azorult

C2

http://abae.us/petit/index.php

Targets

    • Target

      3d7e0748f65f6d55887fab28de98bbde_JaffaCakes118

    • Size

      345KB

    • MD5

      3d7e0748f65f6d55887fab28de98bbde

    • SHA1

      0700ff40bde7331b2145839e2d3f53d2281b0c29

    • SHA256

      2accfbc3e93bbfde22d833a6e3d8b5a53b3e8d2f6d38ab3e2bfb86fa2cb7a196

    • SHA512

      0b9df3e0eca4b49604e61f3c131a9a57744e65baa4d0a4acd4e45159e20fb0924ba268c964d90a72d2fb646a2b15000526c2c5924acf9202682675becf26be23

    • SSDEEP

      6144:lWKjIfJveskxogPcqCyA+D7v3JM+RKusJ7S7tGYIqt8jN8:bjIfQXxvCyAEb3JWJ+xai

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks