General
-
Target
42a3ac529d7ccd68091f78b6aee12bb7_JaffaCakes118
-
Size
685KB
-
Sample
240514-xteqfabf41
-
MD5
42a3ac529d7ccd68091f78b6aee12bb7
-
SHA1
36f392e83c8f0513d0a44124bbf5412e87d789a7
-
SHA256
fc7c7bb2016e3739d888a4a742e6a76fb168e062369414f1f34a9ca265f2b1b7
-
SHA512
87f1254708ab4e90ab9441bb9a151a5e6d42e1970cfc2cad4617521145f2800292784261095e16cad56007d456791ad57e9daec6129c1f14c4a1b4e12ff8123a
-
SSDEEP
12288:3aeZZ+Dy7X9nde1F91GtuLdiigY41ecgbs9D7Z8AN4f7/e0VaQ:xz+EX9ndeNauAAygbs9Dlk7VX
Static task
static1
Behavioral task
behavioral1
Sample
42a3ac529d7ccd68091f78b6aee12bb7_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
42a3ac529d7ccd68091f78b6aee12bb7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
azorult
http://51.68.90.171/index.php
Targets
-
-
Target
42a3ac529d7ccd68091f78b6aee12bb7_JaffaCakes118
-
Size
685KB
-
MD5
42a3ac529d7ccd68091f78b6aee12bb7
-
SHA1
36f392e83c8f0513d0a44124bbf5412e87d789a7
-
SHA256
fc7c7bb2016e3739d888a4a742e6a76fb168e062369414f1f34a9ca265f2b1b7
-
SHA512
87f1254708ab4e90ab9441bb9a151a5e6d42e1970cfc2cad4617521145f2800292784261095e16cad56007d456791ad57e9daec6129c1f14c4a1b4e12ff8123a
-
SSDEEP
12288:3aeZZ+Dy7X9nde1F91GtuLdiigY41ecgbs9D7Z8AN4f7/e0VaQ:xz+EX9ndeNauAAygbs9Dlk7VX
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-