General
-
Target
6628d519ae808a7a853dd955ea45893d_JaffaCakes118
-
Size
1.0MB
-
Sample
240723-e7p48ayckn
-
MD5
6628d519ae808a7a853dd955ea45893d
-
SHA1
f9bb1a097a097e9409ff21d601dbd13694cecf35
-
SHA256
aa2a898c9c70be89bdfd491f8817dc888bcb49a8892219c9ea608c5d77f03419
-
SHA512
36f71c5a0687c848887afe411800b56bcd826fea3e2f29d91f932c070bcef2c237e481c501f7767b95d9456bee7f4bccfd53313ff94508e3df30581be9223086
-
SSDEEP
24576:fAHnh+eWsN3skA4RV1Hom2KXMmHaOfJ5T85:Ch+ZkldoPK8YaMK
Static task
static1
Behavioral task
behavioral1
Sample
6628d519ae808a7a853dd955ea45893d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6628d519ae808a7a853dd955ea45893d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
azorult
http://www.dxienfina.com/joro/index.php
Targets
-
-
Target
6628d519ae808a7a853dd955ea45893d_JaffaCakes118
-
Size
1.0MB
-
MD5
6628d519ae808a7a853dd955ea45893d
-
SHA1
f9bb1a097a097e9409ff21d601dbd13694cecf35
-
SHA256
aa2a898c9c70be89bdfd491f8817dc888bcb49a8892219c9ea608c5d77f03419
-
SHA512
36f71c5a0687c848887afe411800b56bcd826fea3e2f29d91f932c070bcef2c237e481c501f7767b95d9456bee7f4bccfd53313ff94508e3df30581be9223086
-
SSDEEP
24576:fAHnh+eWsN3skA4RV1Hom2KXMmHaOfJ5T85:Ch+ZkldoPK8YaMK
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Drops startup file
-
Suspicious use of SetThreadContext
-