General

  • Target

    b8375b25960a45d8f241f8f9cca25596_JaffaCakes118

  • Size

    112KB

  • Sample

    240822-s7j5vsvfjg

  • MD5

    b8375b25960a45d8f241f8f9cca25596

  • SHA1

    9056e7f4d0b3f6b4f4ca9dbaa654d27a8b443fd4

  • SHA256

    735d4133a6cafafb214a0a9e566b04a0b5c06a28ad2887c9856230c938b65f86

  • SHA512

    945eb4ba012a5cec515050bbd1c43929310b57e5e23015ebbf6a2ed4a7fdd61a7b1f0ebff4826c9bd306b922d6b289e5d01b4a2ebacd0827fbb69eb1232f6e48

  • SSDEEP

    3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/ixg/:Zzx7ZApszolIo7lf/ipT/i

Malware Config

Extracted

Family

azorult

C2

http://google.com/index.phphp

Targets

    • Target

      b8375b25960a45d8f241f8f9cca25596_JaffaCakes118

    • Size

      112KB

    • MD5

      b8375b25960a45d8f241f8f9cca25596

    • SHA1

      9056e7f4d0b3f6b4f4ca9dbaa654d27a8b443fd4

    • SHA256

      735d4133a6cafafb214a0a9e566b04a0b5c06a28ad2887c9856230c938b65f86

    • SHA512

      945eb4ba012a5cec515050bbd1c43929310b57e5e23015ebbf6a2ed4a7fdd61a7b1f0ebff4826c9bd306b922d6b289e5d01b4a2ebacd0827fbb69eb1232f6e48

    • SSDEEP

      3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/ixg/:Zzx7ZApszolIo7lf/ipT/i

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks