General

  • Target

    8d42c2746660333da070bf2e23de2c27_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240602-hxr3lsed9s

  • MD5

    8d42c2746660333da070bf2e23de2c27

  • SHA1

    5fe326c6807bc1c027405abf2cd0ce7c446cb127

  • SHA256

    9a5844970ae41f91c20bbee5a312c9bee99d40911e634f47aef61e2c4bd17649

  • SHA512

    df3c553a0ceff0a0afd129a325f8df37a59550b6dab7929481312a16227e8efa75bd0697732f37cf957601ad9438deab9fbcd5d3b8aecdf5a3e990b95ba78bfa

  • SSDEEP

    24576:fu6Jx3O0c+JY5UZ+XC0kGso/Wa+j36AoiSoGReGhpWOrHog7WYi:pI0c++OCvkGsUWa+jKKOrIzYi

Malware Config

Extracted

Family

azorult

C2

http://195.245.112.115/index.php

Targets

    • Target

      8d42c2746660333da070bf2e23de2c27_JaffaCakes118

    • Size

      1.4MB

    • MD5

      8d42c2746660333da070bf2e23de2c27

    • SHA1

      5fe326c6807bc1c027405abf2cd0ce7c446cb127

    • SHA256

      9a5844970ae41f91c20bbee5a312c9bee99d40911e634f47aef61e2c4bd17649

    • SHA512

      df3c553a0ceff0a0afd129a325f8df37a59550b6dab7929481312a16227e8efa75bd0697732f37cf957601ad9438deab9fbcd5d3b8aecdf5a3e990b95ba78bfa

    • SSDEEP

      24576:fu6Jx3O0c+JY5UZ+XC0kGso/Wa+j36AoiSoGReGhpWOrHog7WYi:pI0c++OCvkGsUWa+jKKOrIzYi

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks