Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
11-08-2024 13:13
General
-
Target
8a7d9d4e136cb66f8edb70539eb89fcf_JaffaCakes118.exe
-
Size
216KB
-
MD5
8a7d9d4e136cb66f8edb70539eb89fcf
-
SHA1
aac446c148e339f83b8385950fdab6c1c883c6c0
-
SHA256
bb1ee95689523be85c2cf7951400a52106331b042da2923a3bc8db0a3fb9243c
-
SHA512
192fa2e32dbf971d56000a3eb36eeecbf542d6154f88ad7d1ba812b489bcf9041e79bd55dc9a164604d9ed7cb6dbba0c1b12bc638fa58f1da4636621ef90542e
-
SSDEEP
6144:wIm7H1Auxr02KkuDqqTgydksFq0WOYAan/ewR:47H1Ae0sM/4sFgAMm
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://217.8.117.24/FF621070-FFBC-431C-A6E3-E1BEAD7A3F09/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\8a7d9d4e136cb66f8edb70539eb89fcf_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8a7d9d4e136cb66f8edb70539eb89fcf_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
228KB
-
Filesize
228KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
228KB
-
Filesize
204KB