General

  • Target

    58ac057e6d46663651554850aa68cc3c_JaffaCakes118

  • Size

    189KB

  • Sample

    240519-fphsvsbe9t

  • MD5

    58ac057e6d46663651554850aa68cc3c

  • SHA1

    5694a5342cbc4f51cee5eba02a3d9be4de0c3d87

  • SHA256

    e22d84db06fa31b65f04c24c08a6c62360d30d021659a94beaa2f7fb71bb8598

  • SHA512

    015f990d029610cb156744e50176dde8f5e2030d19c23b666e3f9ef4572f19223d7d13061689c13f462107080f8979899a14e49cfbb5512a8bd1a3121edbdab0

  • SSDEEP

    1536:GaEdFidxG7oCOHEzeTPAEpTCdsoMK3k5WzX7j96jwBN76WJlNkVNvUCCLdUPfIvS:oUdQ7ov+eoD3k5Wzf+a3NsNMxdUYu+Q

Malware Config

Extracted

Family

azorult

C2

http://mahnatkin.site/andromache/index.php

Targets

    • Target

      58ac057e6d46663651554850aa68cc3c_JaffaCakes118

    • Size

      189KB

    • MD5

      58ac057e6d46663651554850aa68cc3c

    • SHA1

      5694a5342cbc4f51cee5eba02a3d9be4de0c3d87

    • SHA256

      e22d84db06fa31b65f04c24c08a6c62360d30d021659a94beaa2f7fb71bb8598

    • SHA512

      015f990d029610cb156744e50176dde8f5e2030d19c23b666e3f9ef4572f19223d7d13061689c13f462107080f8979899a14e49cfbb5512a8bd1a3121edbdab0

    • SSDEEP

      1536:GaEdFidxG7oCOHEzeTPAEpTCdsoMK3k5WzX7j96jwBN76WJlNkVNvUCCLdUPfIvS:oUdQ7ov+eoD3k5Wzf+a3NsNMxdUYu+Q

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Matrix

Tasks