General
-
Target
a03a4a71e27fdf267002225b01c4d6a0_JaffaCakes118
-
Size
1023KB
-
Sample
240612-lvma5azfpa
-
MD5
a03a4a71e27fdf267002225b01c4d6a0
-
SHA1
8886d89c36d2219cbf51a40fbc09f7c62f33c354
-
SHA256
fb806baf00f548b12352301b6f659567d6153a41d76df6887b5b3fddb3e547c5
-
SHA512
2490b61e068314ae7841f223f95c0bee6290555b47af6a70fea992e54e32ff6c40f097272473165fd9ffbaf78d6026bfdafdf778944b8b2f0293784aa1b0bf4b
-
SSDEEP
24576:jAHnh+eWsN3skA4RV1Hom2KXMmHa2PTlazl4h5:uh+ZkldoPK8Ya2Relm
Static task
static1
Behavioral task
behavioral1
Sample
a03a4a71e27fdf267002225b01c4d6a0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a03a4a71e27fdf267002225b01c4d6a0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
azorult
http://ANYIOBA.INFO/index.php
Targets
-
-
Target
a03a4a71e27fdf267002225b01c4d6a0_JaffaCakes118
-
Size
1023KB
-
MD5
a03a4a71e27fdf267002225b01c4d6a0
-
SHA1
8886d89c36d2219cbf51a40fbc09f7c62f33c354
-
SHA256
fb806baf00f548b12352301b6f659567d6153a41d76df6887b5b3fddb3e547c5
-
SHA512
2490b61e068314ae7841f223f95c0bee6290555b47af6a70fea992e54e32ff6c40f097272473165fd9ffbaf78d6026bfdafdf778944b8b2f0293784aa1b0bf4b
-
SSDEEP
24576:jAHnh+eWsN3skA4RV1Hom2KXMmHa2PTlazl4h5:uh+ZkldoPK8Ya2Relm
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-