General
-
Target
304dcc445a88ebbe5f929d7c2e546146_JaffaCakes118
-
Size
344KB
-
Sample
240709-n9mxbavejd
-
MD5
304dcc445a88ebbe5f929d7c2e546146
-
SHA1
2e1313071984c8a73997778962cbacc2ff8d8efd
-
SHA256
33b93777f0db8c195d9a9e52c7442bd98376cfcac4d929912dc6155cdcfd550e
-
SHA512
4c458bf109a06bf382bca765c2181c15758fd6921d4192d9ee660707ca5eefdb68b1bb5fd028755f33cc1628c0630572ada0d8c258f411c366def8d31c67b4d0
-
SSDEEP
6144:7bjy2rtepz+IIuN3cg7O8P2TAOjKYmS1jdfhSf21a/qE6I:7bW3PIuNR7v+T4DS1dhSf2UyE6I
Static task
static1
Behavioral task
behavioral1
Sample
304dcc445a88ebbe5f929d7c2e546146_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
304dcc445a88ebbe5f929d7c2e546146_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Extracted
azorult
http://195.245.112.115/index.php
Targets
-
-
Target
304dcc445a88ebbe5f929d7c2e546146_JaffaCakes118
-
Size
344KB
-
MD5
304dcc445a88ebbe5f929d7c2e546146
-
SHA1
2e1313071984c8a73997778962cbacc2ff8d8efd
-
SHA256
33b93777f0db8c195d9a9e52c7442bd98376cfcac4d929912dc6155cdcfd550e
-
SHA512
4c458bf109a06bf382bca765c2181c15758fd6921d4192d9ee660707ca5eefdb68b1bb5fd028755f33cc1628c0630572ada0d8c258f411c366def8d31c67b4d0
-
SSDEEP
6144:7bjy2rtepz+IIuN3cg7O8P2TAOjKYmS1jdfhSf21a/qE6I:7bW3PIuNR7v+T4DS1dhSf2UyE6I
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-