Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
10-06-2024 23:46
General
-
Target
9c5806674011b297ac84f96f3a16f1e9_JaffaCakes118.exe
-
Size
277KB
-
MD5
9c5806674011b297ac84f96f3a16f1e9
-
SHA1
6536fe0726720cb75c2848e3f3aa5cb5d33bc574
-
SHA256
aa05599c5095f883b88f8600a00d32efa7b7e64d10bfccb0d25300177f3bab26
-
SHA512
17f68127632db1c999a58fb3ca7f5b7a72fe06042979a921a0c8ac4621b3e4673801043e55d142a62f19ed8b73a80dd35c78a3680ef6de15df5fc4d3af7a68b5
-
SSDEEP
6144:PK+RLaDXoJ4dbhR9S4A02ZV2hBYHFyUNeBw:PKEkXPdbhPS4AyuN/
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://217.8.117.19/22C60E11-E977-4823-B41A-E220438E8823/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9c5806674011b297ac84f96f3a16f1e9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\9c5806674011b297ac84f96f3a16f1e9_JaffaCakes118.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4212 -s 14362⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4212 -ip 42121⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
128KB
-
Filesize
664KB
-
Filesize
128KB