General

  • Target

    8b06dfe2bdaf517ee704626e2f91c377_JaffaCakes118

  • Size

    840KB

  • Sample

    240601-tttmtahb39

  • MD5

    8b06dfe2bdaf517ee704626e2f91c377

  • SHA1

    6a519f45f174d31c0b72d334a4d0d7b9f1afcdb5

  • SHA256

    5fc6be5b47ce706a81a12cbeaa3b3a200a31880cffd536fb60719257acbfc231

  • SHA512

    a2a7694af96f17e69f998b9936f470a9679637b1d92e6e95e649cd2a3ff4078a430972a9c45537f3d57d3e7c55aaabd5a5065bf9e6d49975ebfe050f40113d88

  • SSDEEP

    12288:vwp+rZ3rGpb7GsFVCjGI/8q94uEqjfKRYaECRUZA6:BZ3rGb7Gsg+7qj2

Malware Config

Extracted

Family

azorult

C2

http://bolondref.com/index.php

Targets

    • Target

      8b06dfe2bdaf517ee704626e2f91c377_JaffaCakes118

    • Size

      840KB

    • MD5

      8b06dfe2bdaf517ee704626e2f91c377

    • SHA1

      6a519f45f174d31c0b72d334a4d0d7b9f1afcdb5

    • SHA256

      5fc6be5b47ce706a81a12cbeaa3b3a200a31880cffd536fb60719257acbfc231

    • SHA512

      a2a7694af96f17e69f998b9936f470a9679637b1d92e6e95e649cd2a3ff4078a430972a9c45537f3d57d3e7c55aaabd5a5065bf9e6d49975ebfe050f40113d88

    • SSDEEP

      12288:vwp+rZ3rGpb7GsFVCjGI/8q94uEqjfKRYaECRUZA6:BZ3rGb7Gsg+7qj2

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks