General

  • Target

    4daf05b00e6da2ddda1232c4fda51fbd_JaffaCakes118

  • Size

    112KB

  • Sample

    240729-sb77taxhld

  • MD5

    4daf05b00e6da2ddda1232c4fda51fbd

  • SHA1

    7e02d18f25017a8d5f12b6ec0640b01beb7a3708

  • SHA256

    e64c8f136631aeadef08cb148c6a1becab72b0447d8e9dfb25ad3948ce4af093

  • SHA512

    0e8e72acf601563c860e2ee435a3bfaafab0b070e97fdd5cfdec836551c1a9c544309575f4252c2b53f3ed2b752cd5dd952747e12f2dc401c503e3ec6e5b81de

  • SSDEEP

    3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeheWginAq:faO1tme+1winP

Malware Config

Extracted

Family

azorult

C2

http://195.245.112.115/index.php

Targets

    • Target

      4daf05b00e6da2ddda1232c4fda51fbd_JaffaCakes118

    • Size

      112KB

    • MD5

      4daf05b00e6da2ddda1232c4fda51fbd

    • SHA1

      7e02d18f25017a8d5f12b6ec0640b01beb7a3708

    • SHA256

      e64c8f136631aeadef08cb148c6a1becab72b0447d8e9dfb25ad3948ce4af093

    • SHA512

      0e8e72acf601563c860e2ee435a3bfaafab0b070e97fdd5cfdec836551c1a9c544309575f4252c2b53f3ed2b752cd5dd952747e12f2dc401c503e3ec6e5b81de

    • SSDEEP

      3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeheWginAq:faO1tme+1winP

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks