General

  • Target

    9bb3638f28f1184c0ca0c1500d6698d6_JaffaCakes118

  • Size

    2.6MB

  • Sample

    240610-xt8zaaxdqq

  • MD5

    9bb3638f28f1184c0ca0c1500d6698d6

  • SHA1

    4b0d028f70841dc794cb9eb696366ce6eb4ba6f0

  • SHA256

    1e7fb271b11372c8168c3b5eccbc903d330e9bf8cd2135c9dc13eb14d11c2518

  • SHA512

    6cf483a1ffa7aec827e7512dd3909a3e21cb2afd97518d95fcdc736985732b13d118db6c4c9e4dc3bcb665646a080338f389eed149520a0803bc8f2a20a38d64

  • SSDEEP

    49152:JUHl/k49nQVhOojoeokJYaBuIx/rRt7dLiT4AQkrEoMjlsm8GwJIc1JqCV:G959Q6C7oBoF371UIZDc9WK

Malware Config

Extracted

Family

azorult

C2

http://51.75.122.235/index.php

Targets

    • Target

      9bb3638f28f1184c0ca0c1500d6698d6_JaffaCakes118

    • Size

      2.6MB

    • MD5

      9bb3638f28f1184c0ca0c1500d6698d6

    • SHA1

      4b0d028f70841dc794cb9eb696366ce6eb4ba6f0

    • SHA256

      1e7fb271b11372c8168c3b5eccbc903d330e9bf8cd2135c9dc13eb14d11c2518

    • SHA512

      6cf483a1ffa7aec827e7512dd3909a3e21cb2afd97518d95fcdc736985732b13d118db6c4c9e4dc3bcb665646a080338f389eed149520a0803bc8f2a20a38d64

    • SSDEEP

      49152:JUHl/k49nQVhOojoeokJYaBuIx/rRt7dLiT4AQkrEoMjlsm8GwJIc1JqCV:G959Q6C7oBoF371UIZDc9WK

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Matrix

Tasks