General

  • Target

    75fe564730b0314934765a57b4b0f293_JaffaCakes118

  • Size

    554KB

  • Sample

    240526-ta7ekace74

  • MD5

    75fe564730b0314934765a57b4b0f293

  • SHA1

    1b087ca7247f7edc9699ff9a654b03185f035a32

  • SHA256

    68bb910965e8cb69b2e757bdc5818db79426d79db3bcb33e8873060353fbbb4c

  • SHA512

    430c2c1a16fa781ce122303fce46b082bd0a25e5ebda95a19afb6fdea14aff4e77eff91c63e9a16e7b206be7c711bd2a7fb34810fd7a6e278a3752909a701232

  • SSDEEP

    12288:EzrE5jpAL/eFKgeiPyYUCoJlVdPX54TKrz:orENpsBLZYbexlz

Malware Config

Extracted

Family

azorult

C2

http://www.exeobmens.com/index.php

Targets

    • Target

      75fe564730b0314934765a57b4b0f293_JaffaCakes118

    • Size

      554KB

    • MD5

      75fe564730b0314934765a57b4b0f293

    • SHA1

      1b087ca7247f7edc9699ff9a654b03185f035a32

    • SHA256

      68bb910965e8cb69b2e757bdc5818db79426d79db3bcb33e8873060353fbbb4c

    • SHA512

      430c2c1a16fa781ce122303fce46b082bd0a25e5ebda95a19afb6fdea14aff4e77eff91c63e9a16e7b206be7c711bd2a7fb34810fd7a6e278a3752909a701232

    • SSDEEP

      12288:EzrE5jpAL/eFKgeiPyYUCoJlVdPX54TKrz:orENpsBLZYbexlz

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks