General
-
Target
5f96cffd883eeeba8ff3296dca4e450c_JaffaCakes118
-
Size
424KB
-
Sample
240520-rxbkasdh42
-
MD5
5f96cffd883eeeba8ff3296dca4e450c
-
SHA1
80f1c73f1b858d9074ac7759d6a9a51646a8c55f
-
SHA256
e81ae51d70f71f356608ad0b72ce8747bf09af7d7734c59f9323488bc8516cbd
-
SHA512
ed6d41459c395466a9f632d7c449b794571e84324d26b89c305d388fdfe3f842b3ad9d8aae2846d00ebb713367cb65703254c761f4288069d2f96e5003343280
-
SSDEEP
6144:QdadU3UfcnyRVwwJCgttCeDqeYS7STC5zYKP8/5ypfKFtSUfsdjZEWM9Kv41DW3E:QdadU3v2wmhQ0QDQMFInEWMQaS74
Static task
static1
Behavioral task
behavioral1
Sample
5f96cffd883eeeba8ff3296dca4e450c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5f96cffd883eeeba8ff3296dca4e450c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
azorult
http://googletime.ug/index.php
Targets
-
-
Target
5f96cffd883eeeba8ff3296dca4e450c_JaffaCakes118
-
Size
424KB
-
MD5
5f96cffd883eeeba8ff3296dca4e450c
-
SHA1
80f1c73f1b858d9074ac7759d6a9a51646a8c55f
-
SHA256
e81ae51d70f71f356608ad0b72ce8747bf09af7d7734c59f9323488bc8516cbd
-
SHA512
ed6d41459c395466a9f632d7c449b794571e84324d26b89c305d388fdfe3f842b3ad9d8aae2846d00ebb713367cb65703254c761f4288069d2f96e5003343280
-
SSDEEP
6144:QdadU3UfcnyRVwwJCgttCeDqeYS7STC5zYKP8/5ypfKFtSUfsdjZEWM9Kv41DW3E:QdadU3v2wmhQ0QDQMFInEWMQaS74
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-