General

  • Target

    8ae57bd141c5d77f0f292e3d3888f31e_JaffaCakes118

  • Size

    4.4MB

  • Sample

    240601-swxltafe8s

  • MD5

    8ae57bd141c5d77f0f292e3d3888f31e

  • SHA1

    a8451991477c75a14dbfa410941e7e30ecfe285b

  • SHA256

    81ce4347e15cef68a26fd857d98200a44a1706c4b45ab2237cf0475c7ff5810a

  • SHA512

    f0b22def0651cfb5ab781861f14c92077c8a553e67b8a69d941599359f4000ca766aa91070230f96ecc96cc79b03f89298f9406a68a00c03141cd39fc30baaaf

  • SSDEEP

    98304:UPNZKMWZA2hxvMW9nt1K4L9nt1K43nd7Z:YjWZ5xU+3V33nd7Z

Malware Config

Extracted

Family

azorult

C2

http://pyttyu.info/index.php

Targets

    • Target

      8ae57bd141c5d77f0f292e3d3888f31e_JaffaCakes118

    • Size

      4.4MB

    • MD5

      8ae57bd141c5d77f0f292e3d3888f31e

    • SHA1

      a8451991477c75a14dbfa410941e7e30ecfe285b

    • SHA256

      81ce4347e15cef68a26fd857d98200a44a1706c4b45ab2237cf0475c7ff5810a

    • SHA512

      f0b22def0651cfb5ab781861f14c92077c8a553e67b8a69d941599359f4000ca766aa91070230f96ecc96cc79b03f89298f9406a68a00c03141cd39fc30baaaf

    • SSDEEP

      98304:UPNZKMWZA2hxvMW9nt1K4L9nt1K43nd7Z:YjWZ5xU+3V33nd7Z

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks