General

  • Target

    536282f4647c267c7701c3ae9f3cd411_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240518-g96absfh83

  • MD5

    536282f4647c267c7701c3ae9f3cd411

  • SHA1

    8f89dee4f5d9d02c65e35117497a5609343f7c08

  • SHA256

    fe47d06fefd2002c1d73c82f09121869581adef61160b4f16721cd3d89510fa7

  • SHA512

    16d8f6ff826acfab91dfab94dec4c4627d7e33408006cd861de8f9e30d43e47101af5075f2f22c387af911ea197edfd5935dea96bd50ed719c62187e080cae86

  • SSDEEP

    24576:AAHnh+eWsN3skA4RV1Hom2KXMmHahIBAwqVFynRcof2S5:3h+ZkldoPK8YaheAw+gRlr

Malware Config

Extracted

Family

azorult

C2

http://mixerfoxy.xyz/fox/index.php

Targets

    • Target

      536282f4647c267c7701c3ae9f3cd411_JaffaCakes118

    • Size

      1.0MB

    • MD5

      536282f4647c267c7701c3ae9f3cd411

    • SHA1

      8f89dee4f5d9d02c65e35117497a5609343f7c08

    • SHA256

      fe47d06fefd2002c1d73c82f09121869581adef61160b4f16721cd3d89510fa7

    • SHA512

      16d8f6ff826acfab91dfab94dec4c4627d7e33408006cd861de8f9e30d43e47101af5075f2f22c387af911ea197edfd5935dea96bd50ed719c62187e080cae86

    • SSDEEP

      24576:AAHnh+eWsN3skA4RV1Hom2KXMmHahIBAwqVFynRcof2S5:3h+ZkldoPK8YaheAw+gRlr

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks