General

  • Target

    9931485505510d5ece7c6c846cb63ac3_JaffaCakes118

  • Size

    280KB

  • Sample

    240815-g2lkystfqj

  • MD5

    9931485505510d5ece7c6c846cb63ac3

  • SHA1

    1a5602e9b50dc3945853167f668a1079e9517c71

  • SHA256

    857fdcbc6dc3c73177aab9f4dab6ea755bdbebdcddee233202b11bf02df919ed

  • SHA512

    4b9b29a0f86f159858ff539c044eb208fe3b1f4e42b7ed942f0541ff2f04a3cfeb41ef0243bd64923342d57c0e0c8b0f88ed585ea9ff7b12ad02b5c41bb09c5a

  • SSDEEP

    6144:XHSdnRYy2eGTbbvFQ49mQz1B85t5nfsvkDJ:+n69JnbvFzTz1GpnEv

Malware Config

Extracted

Family

azorult

C2

http://37.46.150.24/azone/index.php

Targets

    • Target

      9931485505510d5ece7c6c846cb63ac3_JaffaCakes118

    • Size

      280KB

    • MD5

      9931485505510d5ece7c6c846cb63ac3

    • SHA1

      1a5602e9b50dc3945853167f668a1079e9517c71

    • SHA256

      857fdcbc6dc3c73177aab9f4dab6ea755bdbebdcddee233202b11bf02df919ed

    • SHA512

      4b9b29a0f86f159858ff539c044eb208fe3b1f4e42b7ed942f0541ff2f04a3cfeb41ef0243bd64923342d57c0e0c8b0f88ed585ea9ff7b12ad02b5c41bb09c5a

    • SSDEEP

      6144:XHSdnRYy2eGTbbvFQ49mQz1B85t5nfsvkDJ:+n69JnbvFzTz1GpnEv

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks