Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
18-06-2024 13:53
General
-
Target
bc4a7a047e05d467c2a2aa8f3880577b_JaffaCakes118.exe
-
Size
289KB
-
MD5
bc4a7a047e05d467c2a2aa8f3880577b
-
SHA1
7ec10a5338f9e6d62332642cb295ba1a5b129513
-
SHA256
262c4839f6f16091e8e78b370323ea4eef55419feb12ed49a7346865e957da1c
-
SHA512
a2782bf743fd7fb84392c3ddf8c6c793987f0bc504f9ddf64dd299dbc844ead73a978daef22594ed5a5f12aeb2f2a9e82be669c1a3607462f2614bd03d10454a
-
SSDEEP
3072:H5J8Gb2PCwgswZAJBN0uLXPrXMoKSnrUqeqvIGeMtOKgELS3GxlQMIYogxTm:ZhSbgsqAPVTXMFTqvvOKL9x0gY
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://cx00129.tmweb.ru/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc4a7a047e05d467c2a2aa8f3880577b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\bc4a7a047e05d467c2a2aa8f3880577b_JaffaCakes118.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4024 -s 13962⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4024 -ip 40241⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
316KB
-
Filesize
1024KB
-
Filesize
128KB
-
Filesize
316KB
-
Filesize
128KB