Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
12-06-2024 12:48
General
-
Target
a0b93b3b11c03ea3cb240f28628ff799_JaffaCakes118.exe
-
Size
971KB
-
MD5
a0b93b3b11c03ea3cb240f28628ff799
-
SHA1
ae80eb366a814fd4a8249f53c45e78cf1271ddd3
-
SHA256
88bef725fcfe0ce5e56d96ce3f4d47d478e11839a12d8d7e2335ca3fc5e42ec1
-
SHA512
f70093efc9b7ed53712f96cf9bdadb155f7a382b47e7961dd9722dea084ccfe5b4e3d298618314aa74aa3534ae28a61cdad4a54f572f84371c568f45b6f13449
-
SSDEEP
24576:7dQcgqeDLQd8croAGSBlQDRVA4lyh5Lff73YOmwgPK:ZaqQLy8SoAGmiDDhgvYhwgPK
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://195.245.112.115/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a0b93b3b11c03ea3cb240f28628ff799_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a0b93b3b11c03ea3cb240f28628ff799_JaffaCakes118.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.5MB
-
Filesize
3.5MB
-
Filesize
3.5MB
-
Filesize
3.5MB