General
-
Target
ab2f8366fd92bf15a6e4ca35e6b44e53_JaffaCakes118
-
Size
555KB
-
Sample
240819-qlwknawdnh
-
MD5
ab2f8366fd92bf15a6e4ca35e6b44e53
-
SHA1
0acc34346605fadc146945df26cbcc6dfda7de3a
-
SHA256
c34a0f0cfca4f59cc5dbe7588bba82fdf79838593286a80eaad0033df31290de
-
SHA512
061b58a20f8cad0a3fc199fcab2b87ef06c04d3904a39a6da3f1848682f43657bf8bb13f3b12fd303448f816ae2755c816f73d7d41af23562780ca636bdeb257
-
SSDEEP
12288:j2xPEGwlLRqZLkPK3Nd61Z1NelbzO/U0evoHvu1ST5W:uLuLIucN41Z1cY/AvoHkj
Static task
static1
Behavioral task
behavioral1
Sample
ab2f8366fd92bf15a6e4ca35e6b44e53_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab2f8366fd92bf15a6e4ca35e6b44e53_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
azorult
http://50.116.23.203/index.php
Targets
-
-
Target
ab2f8366fd92bf15a6e4ca35e6b44e53_JaffaCakes118
-
Size
555KB
-
MD5
ab2f8366fd92bf15a6e4ca35e6b44e53
-
SHA1
0acc34346605fadc146945df26cbcc6dfda7de3a
-
SHA256
c34a0f0cfca4f59cc5dbe7588bba82fdf79838593286a80eaad0033df31290de
-
SHA512
061b58a20f8cad0a3fc199fcab2b87ef06c04d3904a39a6da3f1848682f43657bf8bb13f3b12fd303448f816ae2755c816f73d7d41af23562780ca636bdeb257
-
SSDEEP
12288:j2xPEGwlLRqZLkPK3Nd61Z1NelbzO/U0evoHvu1ST5W:uLuLIucN41Z1cY/AvoHkj
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-