Overview

overview

10

Static

static

3

56f01b749a...18.exe

windows7-x64

10

56f01b749a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56f01b749a568fa4b6e180484b11e69b_JaffaCakes118

  • Size

    356KB

  • Sample

    240718-mcdrpsxdld

  • MD5

    56f01b749a568fa4b6e180484b11e69b

  • SHA1

    04ebfb5a9626903d6e8418db85a5fb621f1c2a9a

  • SHA256

    1d87746dfce6e0260c8c08b5d1d85ecbe200be70fa0e2dcb4effd37c47dce94d

  • SHA512

    e201e2be1b374bc0464f66185a50bcc0d6ccb2a1979b3bb10e624ec92d45b6e2d053d7f57defd506e77f2417b0f247f9d6be542bfb5ef4e0bbf8c317d86f9460

  • SSDEEP

    6144:EyoFxU6Sz/8bhZYBg/97eYFtKIGWbbLPCCaOJkZLv3BnqKjAucdEOjeHQfM2T:ENZSTDg/kYLKIf7P7aOJkpwucdEGeynT

Score
10/10
azorultinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://195.245.112.115/index.php

Targets

    • Target

      56f01b749a568fa4b6e180484b11e69b_JaffaCakes118

    • Size

      356KB

    • MD5

      56f01b749a568fa4b6e180484b11e69b

    • SHA1

      04ebfb5a9626903d6e8418db85a5fb621f1c2a9a

    • SHA256

      1d87746dfce6e0260c8c08b5d1d85ecbe200be70fa0e2dcb4effd37c47dce94d

    • SHA512

      e201e2be1b374bc0464f66185a50bcc0d6ccb2a1979b3bb10e624ec92d45b6e2d053d7f57defd506e77f2417b0f247f9d6be542bfb5ef4e0bbf8c317d86f9460

    • SSDEEP

      6144:EyoFxU6Sz/8bhZYBg/97eYFtKIGWbbLPCCaOJkZLv3BnqKjAucdEOjeHQfM2T:ENZSTDg/kYLKIf7P7aOJkpwucdEGeynT

    Score
    10/10
    azorultinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks