General

  • Target

    b3a706e520699064bdab959650118d6c_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240616-qaq6ssybmr

  • MD5

    b3a706e520699064bdab959650118d6c

  • SHA1

    ff1bc950f4fa5caa2470b5fd88b3acd456cb1ed5

  • SHA256

    9ca651af22fa0d77a3a9d070aff8bdb65a39415d9add9f12ad21fec20cccb742

  • SHA512

    eedbd32552bbc499cdebeb92ab0e477f2d40178c88f417c4861d46e307c68af52842ddfc5b09e7ba8c022347d1454dccfe46e49c4a4c99ee549a23dd9c59883d

  • SSDEEP

    24576:Bu6Jx3O0c+JY5UZ+XC0kGso/WaetRzGFEAn0AJscHYWvDAUWY:TI0c++OCvkGsUWaJ9VDYWbWY

Malware Config

Extracted

Family

azorult

C2

http://185.222.57.75/index.php

Targets

    • Target

      b3a706e520699064bdab959650118d6c_JaffaCakes118

    • Size

      1.4MB

    • MD5

      b3a706e520699064bdab959650118d6c

    • SHA1

      ff1bc950f4fa5caa2470b5fd88b3acd456cb1ed5

    • SHA256

      9ca651af22fa0d77a3a9d070aff8bdb65a39415d9add9f12ad21fec20cccb742

    • SHA512

      eedbd32552bbc499cdebeb92ab0e477f2d40178c88f417c4861d46e307c68af52842ddfc5b09e7ba8c022347d1454dccfe46e49c4a4c99ee549a23dd9c59883d

    • SSDEEP

      24576:Bu6Jx3O0c+JY5UZ+XC0kGso/WaetRzGFEAn0AJscHYWvDAUWY:TI0c++OCvkGsUWaJ9VDYWbWY

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks