General

  • Target

    bf9e3feb97deec1f959daae713b28c3d_JaffaCakes118

  • Size

    145KB

  • Sample

    240824-24s32awgkl

  • MD5

    bf9e3feb97deec1f959daae713b28c3d

  • SHA1

    c4854df587c3d1219890c2a54422671ac2d8bcff

  • SHA256

    43528766dee8221ed470a6e47c84c0cbaf31ce02a8d38766eef8667528a923f0

  • SHA512

    240fa68f98ca61ace0cb5637e873f415505764f8c2dc9da31bf9204f7bd6fb74d6e6e5bfa906e7c129b3cf158300cee849d193ef3aa07e01656299ba1ad4a4d8

  • SSDEEP

    3072:Zf0/ZFFjpCyVHT5uQ51tdBAxHjt2NnZUZWRoxeFKa7k4d6noHi/S/oYR9:ZfoZFZQEHTsuzS58nZUZcox4Ka049

Malware Config

Extracted

Family

azorult

C2

http://streiro.ru/index.php

Targets

    • Target

      bf9e3feb97deec1f959daae713b28c3d_JaffaCakes118

    • Size

      145KB

    • MD5

      bf9e3feb97deec1f959daae713b28c3d

    • SHA1

      c4854df587c3d1219890c2a54422671ac2d8bcff

    • SHA256

      43528766dee8221ed470a6e47c84c0cbaf31ce02a8d38766eef8667528a923f0

    • SHA512

      240fa68f98ca61ace0cb5637e873f415505764f8c2dc9da31bf9204f7bd6fb74d6e6e5bfa906e7c129b3cf158300cee849d193ef3aa07e01656299ba1ad4a4d8

    • SSDEEP

      3072:Zf0/ZFFjpCyVHT5uQ51tdBAxHjt2NnZUZWRoxeFKa7k4d6noHi/S/oYR9:ZfoZFZQEHTsuzS58nZUZcox4Ka049

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks