General
-
Target
60a3bdd3179a0831df197ec56024dd01_JaffaCakes118
-
Size
671KB
-
Sample
240729-z36lmavgkc
-
MD5
60a3bdd3179a0831df197ec56024dd01
-
SHA1
edb454a7f1573a96ef543ad0e8215a806097d952
-
SHA256
814765ec878346538ddeaed238bb9ffa88e466a0c158e40ad0a2b7f27b4b2676
-
SHA512
918e6008823f925beb133c0fabb56ad0b61d2d44f72f779bee595002ccff5d6b7d0f3e41dc69e0f5d9e53f6f8c374cb3e5b236ea8119267452d7bcc7c4eb1c0c
-
SSDEEP
12288:RxojH5jdL/KyCR7PqRo2YQLa3RFC7cvoLTK6Paigs6jmsK:EljBKnRIIQOhKcCTK6PPgTmR
Static task
static1
Behavioral task
behavioral1
Sample
60a3bdd3179a0831df197ec56024dd01_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
60a3bdd3179a0831df197ec56024dd01_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
azorult
http://ciuj.ir/arnold/index.php
Targets
-
-
Target
60a3bdd3179a0831df197ec56024dd01_JaffaCakes118
-
Size
671KB
-
MD5
60a3bdd3179a0831df197ec56024dd01
-
SHA1
edb454a7f1573a96ef543ad0e8215a806097d952
-
SHA256
814765ec878346538ddeaed238bb9ffa88e466a0c158e40ad0a2b7f27b4b2676
-
SHA512
918e6008823f925beb133c0fabb56ad0b61d2d44f72f779bee595002ccff5d6b7d0f3e41dc69e0f5d9e53f6f8c374cb3e5b236ea8119267452d7bcc7c4eb1c0c
-
SSDEEP
12288:RxojH5jdL/KyCR7PqRo2YQLa3RFC7cvoLTK6Paigs6jmsK:EljBKnRIIQOhKcCTK6PPgTmR
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-