General
-
Target
10a34640fba05520712254b9b9405be0_JaffaCakes118
-
Size
367KB
-
Sample
240626-egb5nstcjb
-
MD5
10a34640fba05520712254b9b9405be0
-
SHA1
4312126f7c95d384c0dd82e23565090563274a39
-
SHA256
9c99458e7cca21da41178cdff64715ced87e03fe61e33182854e4b0438b3b1f9
-
SHA512
cea4500db17d80b5acee020197246b8188dbee320116e95639617fe4fce8290abef281d492f4f097aa7a014263ffbe521505cba1618ddf031c310bca42e117c9
-
SSDEEP
6144:hw5nKlNFAmzKpQl/nTWrCPPsD8xJpzPNXtSlpL+pyxmjO+moBAZXUBgGnLU:OuDAmRLWrxD8xDzPNdSlpL+ywjrmQAZR
Static task
static1
Behavioral task
behavioral1
Sample
10a34640fba05520712254b9b9405be0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
10a34640fba05520712254b9b9405be0_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
azorult
https://corpcougar.com/bguy/32/index.php
Targets
-
-
Target
10a34640fba05520712254b9b9405be0_JaffaCakes118
-
Size
367KB
-
MD5
10a34640fba05520712254b9b9405be0
-
SHA1
4312126f7c95d384c0dd82e23565090563274a39
-
SHA256
9c99458e7cca21da41178cdff64715ced87e03fe61e33182854e4b0438b3b1f9
-
SHA512
cea4500db17d80b5acee020197246b8188dbee320116e95639617fe4fce8290abef281d492f4f097aa7a014263ffbe521505cba1618ddf031c310bca42e117c9
-
SSDEEP
6144:hw5nKlNFAmzKpQl/nTWrCPPsD8xJpzPNXtSlpL+pyxmjO+moBAZXUBgGnLU:OuDAmRLWrxD8xDzPNdSlpL+ywjrmQAZR
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-