General
- Target a3aa8416843adbd0800c9f673555124f_JaffaCakes118
- Size 216KB
- Sample240613-dy2afswekk
- SHA256 79c15543e0c59f72c7f70f6616269946c81d495c1ee2fd8b92f91c22cebbdb58
- MD5 a3aa8416843adbd0800c9f673555124f
- SHA1 ec1f4681f8a4299b1e5445f34d35ed100c4ee14e
- SHA512 cda9f2e09cb909cb2c05876beb631957b6e5196d804c83ac855a8295f7eb08fad225e8df2463ea723f2dfe1c1d32526119ab5f87311bc6da6361b66adb25c85a
- SSDEEP 3072:LTG9xkgD6w+MYCM1YEgh09Jjl6XLcnGItRsMTQcy1gg0x1QjIznJz:ne6w+MYCREUMR2cDMXcy1gg0x3J
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a3aa8416843adbd0800c9f673555124f_JaffaCakes118.exe
Resource
win7-20240611-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
a3aa8416843adbd0800c9f673555124f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://bullethome.cf/Mega/index.php
Targets
-
- Target a3aa8416843adbd0800c9f673555124f_JaffaCakes118
- Size 216KB
- SHA256 79c15543e0c59f72c7f70f6616269946c81d495c1ee2fd8b92f91c22cebbdb58
- MD5 a3aa8416843adbd0800c9f673555124f
- SHA1 ec1f4681f8a4299b1e5445f34d35ed100c4ee14e
- SHA512 cda9f2e09cb909cb2c05876beb631957b6e5196d804c83ac855a8295f7eb08fad225e8df2463ea723f2dfe1c1d32526119ab5f87311bc6da6361b66adb25c85a
- SSDEEP 3072:LTG9xkgD6w+MYCM1YEgh09Jjl6XLcnGItRsMTQcy1gg0x1QjIznJz:ne6w+MYCREUMR2cDMXcy1gg0x3J
- MD5 SHA1 SHA512 SSDEEP
Score10/10Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
Suspicious use of SetThreadContext