General
-
Target
bf17fc8b5fd7352b296218e945790ba7_JaffaCakes118
-
Size
112KB
-
Sample
240824-vxyava1clh
-
MD5
bf17fc8b5fd7352b296218e945790ba7
-
SHA1
efcb8c99c3d535815a87ce6f474fc0231597d663
-
SHA256
a7644aba8dc0bfdc49829b77b36cf30ea9be628272982efd6026427e92e28f08
-
SHA512
5dec3b91de698c922140aa0db4a469624600c4d3c4ff5589862203455a8e965b121ea55345704bf968b44e2695d1b5f37164f42b33ee1a493ab9ed40f033b2d6
-
SSDEEP
3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEYnE/oxg/:Zzx7ZApszolIo7lf/ipT/o
Behavioral task
behavioral1
Sample
bf17fc8b5fd7352b296218e945790ba7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bf17fc8b5fd7352b296218e945790ba7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
azorult
http://cd63401.tmweb.ru/index.php
Targets
-
-
Target
bf17fc8b5fd7352b296218e945790ba7_JaffaCakes118
-
Size
112KB
-
MD5
bf17fc8b5fd7352b296218e945790ba7
-
SHA1
efcb8c99c3d535815a87ce6f474fc0231597d663
-
SHA256
a7644aba8dc0bfdc49829b77b36cf30ea9be628272982efd6026427e92e28f08
-
SHA512
5dec3b91de698c922140aa0db4a469624600c4d3c4ff5589862203455a8e965b121ea55345704bf968b44e2695d1b5f37164f42b33ee1a493ab9ed40f033b2d6
-
SSDEEP
3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEYnE/oxg/:Zzx7ZApszolIo7lf/ipT/o
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-