General

  • Target

    ab2f8366fd92bf15a6e4ca35e6b44e53_JaffaCakes118

  • Size

    555KB

  • Sample

    240819-qlwknawdnh

  • MD5

    ab2f8366fd92bf15a6e4ca35e6b44e53

  • SHA1

    0acc34346605fadc146945df26cbcc6dfda7de3a

  • SHA256

    c34a0f0cfca4f59cc5dbe7588bba82fdf79838593286a80eaad0033df31290de

  • SHA512

    061b58a20f8cad0a3fc199fcab2b87ef06c04d3904a39a6da3f1848682f43657bf8bb13f3b12fd303448f816ae2755c816f73d7d41af23562780ca636bdeb257

  • SSDEEP

    12288:j2xPEGwlLRqZLkPK3Nd61Z1NelbzO/U0evoHvu1ST5W:uLuLIucN41Z1cY/AvoHkj

Malware Config

Extracted

Family

azorult

C2

http://50.116.23.203/index.php

Targets

    • Target

      ab2f8366fd92bf15a6e4ca35e6b44e53_JaffaCakes118

    • Size

      555KB

    • MD5

      ab2f8366fd92bf15a6e4ca35e6b44e53

    • SHA1

      0acc34346605fadc146945df26cbcc6dfda7de3a

    • SHA256

      c34a0f0cfca4f59cc5dbe7588bba82fdf79838593286a80eaad0033df31290de

    • SHA512

      061b58a20f8cad0a3fc199fcab2b87ef06c04d3904a39a6da3f1848682f43657bf8bb13f3b12fd303448f816ae2755c816f73d7d41af23562780ca636bdeb257

    • SSDEEP

      12288:j2xPEGwlLRqZLkPK3Nd61Z1NelbzO/U0evoHvu1ST5W:uLuLIucN41Z1cY/AvoHkj

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks