Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
18-05-2024 18:50
General
-
Target
5645a5321164781b0650e774d59b9e29_JaffaCakes118.exe
-
Size
858KB
-
MD5
5645a5321164781b0650e774d59b9e29
-
SHA1
10975227ea187031eb8249cfe720192483252f5f
-
SHA256
7c059cc6f0344e6f066dac8db17c6d1e2202448c865cc98d9046e50314e5d0b9
-
SHA512
80d490e8c4c263803121836a9b220a9d3bed5d4ee9c50a2002283a2d13afdb2f4ae1bb19cef97d74354c1c72f882f014b4101e6a20807f034b7f0fba17a58321
-
SSDEEP
12288:T0OZhtesZ5Z3c7DEgfD9wer+GLFlIK/BwlTpH900Frt6k+eE5crJ+:T/ttZ3c7DEgfDGer+GLwlTpuEscd+
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://195.206.106.166/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5645a5321164781b0650e774d59b9e29_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5645a5321164781b0650e774d59b9e29_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
232KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
232KB
-
Filesize
876KB
-
Filesize
4KB
-
Filesize
876KB
-
Filesize
876KB
-
Filesize
876KB
-
Filesize
232KB