Analysis
-
max time kernel
135s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
14-05-2024 10:08
General
-
Target
411ba17cba2d822e5871f1354df8cadc_JaffaCakes118.exe
-
Size
141KB
-
MD5
411ba17cba2d822e5871f1354df8cadc
-
SHA1
fdd66dd2774563bd283396f843725eb7937c96db
-
SHA256
a697b1a96426c886b7d0b0d81dde557d5183875fefb4434dc2897d2e22f510bc
-
SHA512
f61861570fd62689a2f5aef30e1115ff468f300ffbb3da409442f60a3412ebadcb399feb4768024100877092e1afc54fd70c13a0f4563ccf027cb2a0ce5b10fa
-
SSDEEP
3072:BfmDwf8SicL2RePNngxfJMbiEtYqbKaKJe+X7+PjDk3evpTlvdYhV/VAoT5cy1Ac:EDLcL2RMngxfJMbiwYqbKaKJe+r+PjDs
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://au.tanto.pro/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
Processes
-
C:\Users\Admin\AppData\Local\Temp\411ba17cba2d822e5871f1354df8cadc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\411ba17cba2d822e5871f1354df8cadc_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144KB
-
Filesize
144KB
-
Filesize
152KB
-
Filesize
144KB
-
Filesize
144KB