General
-
Target
8ae57bd141c5d77f0f292e3d3888f31e_JaffaCakes118
-
Size
4.4MB
-
Sample
240601-swxltafe8s
-
MD5
8ae57bd141c5d77f0f292e3d3888f31e
-
SHA1
a8451991477c75a14dbfa410941e7e30ecfe285b
-
SHA256
81ce4347e15cef68a26fd857d98200a44a1706c4b45ab2237cf0475c7ff5810a
-
SHA512
f0b22def0651cfb5ab781861f14c92077c8a553e67b8a69d941599359f4000ca766aa91070230f96ecc96cc79b03f89298f9406a68a00c03141cd39fc30baaaf
-
SSDEEP
98304:UPNZKMWZA2hxvMW9nt1K4L9nt1K43nd7Z:YjWZ5xU+3V33nd7Z
Static task
static1
Behavioral task
behavioral1
Sample
8ae57bd141c5d77f0f292e3d3888f31e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8ae57bd141c5d77f0f292e3d3888f31e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
azorult
http://pyttyu.info/index.php
Targets
-
-
Target
8ae57bd141c5d77f0f292e3d3888f31e_JaffaCakes118
-
Size
4.4MB
-
MD5
8ae57bd141c5d77f0f292e3d3888f31e
-
SHA1
a8451991477c75a14dbfa410941e7e30ecfe285b
-
SHA256
81ce4347e15cef68a26fd857d98200a44a1706c4b45ab2237cf0475c7ff5810a
-
SHA512
f0b22def0651cfb5ab781861f14c92077c8a553e67b8a69d941599359f4000ca766aa91070230f96ecc96cc79b03f89298f9406a68a00c03141cd39fc30baaaf
-
SSDEEP
98304:UPNZKMWZA2hxvMW9nt1K4L9nt1K43nd7Z:YjWZ5xU+3V33nd7Z
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Executes dropped EXE
-
Loads dropped DLL
-