General

  • Target

    60a834627e8cfee72b883b5079c19230_JaffaCakes118

  • Size

    783KB

  • Sample

    240520-xj8krscg43

  • MD5

    60a834627e8cfee72b883b5079c19230

  • SHA1

    eff6b3bcb4b5084dc2f6e61729539cd06af85cbb

  • SHA256

    d587d0f6c334c9779ca9a9737d9e7e846af432330c679c690ef86ea71e61e4f6

  • SHA512

    097c9a83389b8e347c45536e1ad25971f768a08e02b07bc2e818600e6d2c665bfcab08f66f6589555dd3fe96ec729077bd142c7bd9605fd5d6df47981c759b5f

  • SSDEEP

    12288:DOkWwngdK9crOjdm34Jp/K4wT81Er+FER1zlGzS1SlNnncH+ndA:zWn8RZz/gMbER1oGHeC

Malware Config

Extracted

Family

azorult

C2

http://waresystem.com/index.php

Targets

    • Target

      60a834627e8cfee72b883b5079c19230_JaffaCakes118

    • Size

      783KB

    • MD5

      60a834627e8cfee72b883b5079c19230

    • SHA1

      eff6b3bcb4b5084dc2f6e61729539cd06af85cbb

    • SHA256

      d587d0f6c334c9779ca9a9737d9e7e846af432330c679c690ef86ea71e61e4f6

    • SHA512

      097c9a83389b8e347c45536e1ad25971f768a08e02b07bc2e818600e6d2c665bfcab08f66f6589555dd3fe96ec729077bd142c7bd9605fd5d6df47981c759b5f

    • SSDEEP

      12288:DOkWwngdK9crOjdm34Jp/K4wT81Er+FER1zlGzS1SlNnncH+ndA:zWn8RZz/gMbER1oGHeC

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks