General

  • Target

    77877a57ab2d93042bae010c7342a423_JaffaCakes118

  • Size

    4.9MB

  • Sample

    240527-cc8a7scc2y

  • MD5

    77877a57ab2d93042bae010c7342a423

  • SHA1

    a3ea2c10c6812257a650d7890d7a278d8b67d371

  • SHA256

    677471e9121f4a29a8b0ea4e6a1c730bd0e2908f1c517c8356909f69007efab3

  • SHA512

    979fe536402cb3ea776274ed3f961507508334e518bbe5ad589855e3aa46deac0766e02c91bf9dba8a91ebf6a75b9c9a18efc24c6ca4f22e712c7f3f9a6e08df

  • SSDEEP

    98304:pAI+mVN/BclFu8oj2/sJ1QXzy6R/ib93ov7D9EHudivaA3LFS07uvdRu3N6lXo91:itkWFUjv1ozD9EHIkFSocd4Ae1

Malware Config

Targets

    • Target

      77877a57ab2d93042bae010c7342a423_JaffaCakes118

    • Size

      4.9MB

    • MD5

      77877a57ab2d93042bae010c7342a423

    • SHA1

      a3ea2c10c6812257a650d7890d7a278d8b67d371

    • SHA256

      677471e9121f4a29a8b0ea4e6a1c730bd0e2908f1c517c8356909f69007efab3

    • SHA512

      979fe536402cb3ea776274ed3f961507508334e518bbe5ad589855e3aa46deac0766e02c91bf9dba8a91ebf6a75b9c9a18efc24c6ca4f22e712c7f3f9a6e08df

    • SSDEEP

      98304:pAI+mVN/BclFu8oj2/sJ1QXzy6R/ib93ov7D9EHudivaA3LFS07uvdRu3N6lXo91:itkWFUjv1ozD9EHIkFSocd4Ae1

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks