General

  • Target

    919c771d279135f6474abdc43fc603d9_JaffaCakes118

  • Size

    710KB

  • Sample

    240813-e3ta3svaja

  • MD5

    919c771d279135f6474abdc43fc603d9

  • SHA1

    9054198117ee9da213dcfcf5bddbd3611affb7f3

  • SHA256

    6a7b530ce7035af9262e414949058513e9f0db341244250af03b8d932d7c47c3

  • SHA512

    44bfb241516f5ac2c508c7bf2da54f814d61f32b0622745edd333f0cf2233038c571e7c0a3e4f5362138728446dbd8f79762f5fb30f12cc452ee388adfeb5fab

  • SSDEEP

    12288:G8pRdFTK9K7lZncxtEgwDuoljBZcPIJrK7uXAq+Q3jurBw9TsrGguVNLXM1:NOK5ZncxtEgwDuolYPveAqd3jGw9Tu0S

Malware Config

Extracted

Family

azorult

C2

http://hapuget.host/index.php

Targets

    • Target

      919c771d279135f6474abdc43fc603d9_JaffaCakes118

    • Size

      710KB

    • MD5

      919c771d279135f6474abdc43fc603d9

    • SHA1

      9054198117ee9da213dcfcf5bddbd3611affb7f3

    • SHA256

      6a7b530ce7035af9262e414949058513e9f0db341244250af03b8d932d7c47c3

    • SHA512

      44bfb241516f5ac2c508c7bf2da54f814d61f32b0622745edd333f0cf2233038c571e7c0a3e4f5362138728446dbd8f79762f5fb30f12cc452ee388adfeb5fab

    • SSDEEP

      12288:G8pRdFTK9K7lZncxtEgwDuoljBZcPIJrK7uXAq+Q3jurBw9TsrGguVNLXM1:NOK5ZncxtEgwDuolYPveAqd3jGw9Tu0S

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks