General

  • Target

    0045a2a2e69690c3b21eaf18412ad175_JaffaCakes118

  • Size

    202KB

  • Sample

    240621-3t8amswenc

  • MD5

    0045a2a2e69690c3b21eaf18412ad175

  • SHA1

    42c0043b92b7f44904d70847769e21f4477ce5a1

  • SHA256

    e2592c776dfd2f247a6dbbcb2dffeda7506327fce566d6f4a382d31e99e0a6c6

  • SHA512

    fdaf7661be4bdca84f15b7eb92217673274f14de8ed467ef315282ba29358e2c417faf880a86451330ebfa2a15a56ec16cc1c9cc1e68fadda8b30e49d491f3a4

  • SSDEEP

    3072:gZ+ZjZGXCTWwIIlW2e3XtqHeLj6++WGRrXon6guCHmCE:g7XCTWwzw3XHLj9vGRjo6Pwm

Malware Config

Extracted

Family

azorult

C2

http://hapuget.host/index.php

Targets

    • Target

      0045a2a2e69690c3b21eaf18412ad175_JaffaCakes118

    • Size

      202KB

    • MD5

      0045a2a2e69690c3b21eaf18412ad175

    • SHA1

      42c0043b92b7f44904d70847769e21f4477ce5a1

    • SHA256

      e2592c776dfd2f247a6dbbcb2dffeda7506327fce566d6f4a382d31e99e0a6c6

    • SHA512

      fdaf7661be4bdca84f15b7eb92217673274f14de8ed467ef315282ba29358e2c417faf880a86451330ebfa2a15a56ec16cc1c9cc1e68fadda8b30e49d491f3a4

    • SSDEEP

      3072:gZ+ZjZGXCTWwIIlW2e3XtqHeLj6++WGRrXon6guCHmCE:g7XCTWwzw3XHLj9vGRjo6Pwm

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks