General

  • Target

    a03a4a71e27fdf267002225b01c4d6a0_JaffaCakes118

  • Size

    1023KB

  • Sample

    240612-lvma5azfpa

  • MD5

    a03a4a71e27fdf267002225b01c4d6a0

  • SHA1

    8886d89c36d2219cbf51a40fbc09f7c62f33c354

  • SHA256

    fb806baf00f548b12352301b6f659567d6153a41d76df6887b5b3fddb3e547c5

  • SHA512

    2490b61e068314ae7841f223f95c0bee6290555b47af6a70fea992e54e32ff6c40f097272473165fd9ffbaf78d6026bfdafdf778944b8b2f0293784aa1b0bf4b

  • SSDEEP

    24576:jAHnh+eWsN3skA4RV1Hom2KXMmHa2PTlazl4h5:uh+ZkldoPK8Ya2Relm

Malware Config

Extracted

Family

azorult

C2

http://ANYIOBA.INFO/index.php

Targets

    • Target

      a03a4a71e27fdf267002225b01c4d6a0_JaffaCakes118

    • Size

      1023KB

    • MD5

      a03a4a71e27fdf267002225b01c4d6a0

    • SHA1

      8886d89c36d2219cbf51a40fbc09f7c62f33c354

    • SHA256

      fb806baf00f548b12352301b6f659567d6153a41d76df6887b5b3fddb3e547c5

    • SHA512

      2490b61e068314ae7841f223f95c0bee6290555b47af6a70fea992e54e32ff6c40f097272473165fd9ffbaf78d6026bfdafdf778944b8b2f0293784aa1b0bf4b

    • SSDEEP

      24576:jAHnh+eWsN3skA4RV1Hom2KXMmHa2PTlazl4h5:uh+ZkldoPK8Ya2Relm

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks