General

  • Target

    42a3ac529d7ccd68091f78b6aee12bb7_JaffaCakes118

  • Size

    685KB

  • Sample

    240514-xteqfabf41

  • MD5

    42a3ac529d7ccd68091f78b6aee12bb7

  • SHA1

    36f392e83c8f0513d0a44124bbf5412e87d789a7

  • SHA256

    fc7c7bb2016e3739d888a4a742e6a76fb168e062369414f1f34a9ca265f2b1b7

  • SHA512

    87f1254708ab4e90ab9441bb9a151a5e6d42e1970cfc2cad4617521145f2800292784261095e16cad56007d456791ad57e9daec6129c1f14c4a1b4e12ff8123a

  • SSDEEP

    12288:3aeZZ+Dy7X9nde1F91GtuLdiigY41ecgbs9D7Z8AN4f7/e0VaQ:xz+EX9ndeNauAAygbs9Dlk7VX

Malware Config

Extracted

Family

azorult

C2

http://51.68.90.171/index.php

Targets

    • Target

      42a3ac529d7ccd68091f78b6aee12bb7_JaffaCakes118

    • Size

      685KB

    • MD5

      42a3ac529d7ccd68091f78b6aee12bb7

    • SHA1

      36f392e83c8f0513d0a44124bbf5412e87d789a7

    • SHA256

      fc7c7bb2016e3739d888a4a742e6a76fb168e062369414f1f34a9ca265f2b1b7

    • SHA512

      87f1254708ab4e90ab9441bb9a151a5e6d42e1970cfc2cad4617521145f2800292784261095e16cad56007d456791ad57e9daec6129c1f14c4a1b4e12ff8123a

    • SSDEEP

      12288:3aeZZ+Dy7X9nde1F91GtuLdiigY41ecgbs9D7Z8AN4f7/e0VaQ:xz+EX9ndeNauAAygbs9Dlk7VX

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks