General
-
Target
60a834627e8cfee72b883b5079c19230_JaffaCakes118
-
Size
783KB
-
Sample
240520-xj8krscg43
-
MD5
60a834627e8cfee72b883b5079c19230
-
SHA1
eff6b3bcb4b5084dc2f6e61729539cd06af85cbb
-
SHA256
d587d0f6c334c9779ca9a9737d9e7e846af432330c679c690ef86ea71e61e4f6
-
SHA512
097c9a83389b8e347c45536e1ad25971f768a08e02b07bc2e818600e6d2c665bfcab08f66f6589555dd3fe96ec729077bd142c7bd9605fd5d6df47981c759b5f
-
SSDEEP
12288:DOkWwngdK9crOjdm34Jp/K4wT81Er+FER1zlGzS1SlNnncH+ndA:zWn8RZz/gMbER1oGHeC
Static task
static1
Behavioral task
behavioral1
Sample
60a834627e8cfee72b883b5079c19230_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
60a834627e8cfee72b883b5079c19230_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
azorult
http://waresystem.com/index.php
Targets
-
-
Target
60a834627e8cfee72b883b5079c19230_JaffaCakes118
-
Size
783KB
-
MD5
60a834627e8cfee72b883b5079c19230
-
SHA1
eff6b3bcb4b5084dc2f6e61729539cd06af85cbb
-
SHA256
d587d0f6c334c9779ca9a9737d9e7e846af432330c679c690ef86ea71e61e4f6
-
SHA512
097c9a83389b8e347c45536e1ad25971f768a08e02b07bc2e818600e6d2c665bfcab08f66f6589555dd3fe96ec729077bd142c7bd9605fd5d6df47981c759b5f
-
SSDEEP
12288:DOkWwngdK9crOjdm34Jp/K4wT81Er+FER1zlGzS1SlNnncH+ndA:zWn8RZz/gMbER1oGHeC
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-