Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 18:21

General

  • Target

    afc1c31cf594f755ce41555fa1b066ff_JaffaCakes118.exe

  • Size

    231KB

  • MD5

    afc1c31cf594f755ce41555fa1b066ff

  • SHA1

    fa980ca3157ec7b8d4092b9558f8e822c214eb54

  • SHA256

    953829ba4d7b404230c476b3afcc023dea1b2e7635b6f385676cee96c53e30da

  • SHA512

    8880555f055ee13062b4d9f9575f0c5706fe316e01f30a79d3fa87dc607488d3586481d063b47d1ca99b82c62fdf375fbe1da588ffb23b3d3fb1a45204fa1050

  • SSDEEP

    3072:Bj6MeMCmz9k9JYb4Sb9HBO/ezx746u9yys7h1gGeITTgBi26caVQIptyT0:BOwGYb429k/DCAIP6E3

Malware Config

Signatures

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

Processes

  • C:\Users\Admin\AppData\Local\Temp\afc1c31cf594f755ce41555fa1b066ff_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\afc1c31cf594f755ce41555fa1b066ff_JaffaCakes118.exe"
    1⤵
      PID:2996

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2996-0-0x00000000003D0000-0x00000000003E9000-memory.dmp

      Filesize

      100KB

    • memory/2996-2-0x0000000000400000-0x0000000000420000-memory.dmp

      Filesize

      128KB

    • memory/2996-1-0x00000000001C0000-0x00000000001C1000-memory.dmp

      Filesize

      4KB

    • memory/2996-3-0x0000000000400000-0x0000000000453000-memory.dmp

      Filesize

      332KB

    • memory/2996-4-0x0000000000400000-0x0000000000420000-memory.dmp

      Filesize

      128KB