General

  • Target

    6009c8cb96bcd423f0e7a2ca6d16354d_JaffaCakes118

  • Size

    210KB

  • Sample

    240520-tvha6shf21

  • MD5

    6009c8cb96bcd423f0e7a2ca6d16354d

  • SHA1

    5af36c78300fdc9eb1b88ef391df5ab7c682a8d0

  • SHA256

    d29c8c8dc5f3e06c8bb9412c4c8c8502c7d1dad7c083ca477a4b291b5300466e

  • SHA512

    e22bd2a0655fe10846428958fdbfab12a63560dd06d72b3053a58b69286d7b0b2de3d3f9c50066e5911c562f58db3c17b1f8b77baa0e78a008a7303cdd800ab6

  • SSDEEP

    3072:E0pwnPQ06/9wd+IyZ3JeQR6DywuxmmoANF7oeAhm/34Vw4KPSOIeSuf0k:ESwPQ06KFy2QMOwKprN+eAhm/oHO5wk

Malware Config

Extracted

Family

azorult

C2

http://91.243.81.212/index.php

Targets

    • Target

      6009c8cb96bcd423f0e7a2ca6d16354d_JaffaCakes118

    • Size

      210KB

    • MD5

      6009c8cb96bcd423f0e7a2ca6d16354d

    • SHA1

      5af36c78300fdc9eb1b88ef391df5ab7c682a8d0

    • SHA256

      d29c8c8dc5f3e06c8bb9412c4c8c8502c7d1dad7c083ca477a4b291b5300466e

    • SHA512

      e22bd2a0655fe10846428958fdbfab12a63560dd06d72b3053a58b69286d7b0b2de3d3f9c50066e5911c562f58db3c17b1f8b77baa0e78a008a7303cdd800ab6

    • SSDEEP

      3072:E0pwnPQ06/9wd+IyZ3JeQR6DywuxmmoANF7oeAhm/34Vw4KPSOIeSuf0k:ESwPQ06KFy2QMOwKprN+eAhm/oHO5wk

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks