General

  • Target

    304dcc445a88ebbe5f929d7c2e546146_JaffaCakes118

  • Size

    344KB

  • Sample

    240709-n9mxbavejd

  • MD5

    304dcc445a88ebbe5f929d7c2e546146

  • SHA1

    2e1313071984c8a73997778962cbacc2ff8d8efd

  • SHA256

    33b93777f0db8c195d9a9e52c7442bd98376cfcac4d929912dc6155cdcfd550e

  • SHA512

    4c458bf109a06bf382bca765c2181c15758fd6921d4192d9ee660707ca5eefdb68b1bb5fd028755f33cc1628c0630572ada0d8c258f411c366def8d31c67b4d0

  • SSDEEP

    6144:7bjy2rtepz+IIuN3cg7O8P2TAOjKYmS1jdfhSf21a/qE6I:7bW3PIuNR7v+T4DS1dhSf2UyE6I

Malware Config

Extracted

Family

azorult

C2

http://195.245.112.115/index.php

Targets

    • Target

      304dcc445a88ebbe5f929d7c2e546146_JaffaCakes118

    • Size

      344KB

    • MD5

      304dcc445a88ebbe5f929d7c2e546146

    • SHA1

      2e1313071984c8a73997778962cbacc2ff8d8efd

    • SHA256

      33b93777f0db8c195d9a9e52c7442bd98376cfcac4d929912dc6155cdcfd550e

    • SHA512

      4c458bf109a06bf382bca765c2181c15758fd6921d4192d9ee660707ca5eefdb68b1bb5fd028755f33cc1628c0630572ada0d8c258f411c366def8d31c67b4d0

    • SSDEEP

      6144:7bjy2rtepz+IIuN3cg7O8P2TAOjKYmS1jdfhSf21a/qE6I:7bW3PIuNR7v+T4DS1dhSf2UyE6I

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks