General

  • Target

    bf17fc8b5fd7352b296218e945790ba7_JaffaCakes118

  • Size

    112KB

  • Sample

    240824-vxyava1clh

  • MD5

    bf17fc8b5fd7352b296218e945790ba7

  • SHA1

    efcb8c99c3d535815a87ce6f474fc0231597d663

  • SHA256

    a7644aba8dc0bfdc49829b77b36cf30ea9be628272982efd6026427e92e28f08

  • SHA512

    5dec3b91de698c922140aa0db4a469624600c4d3c4ff5589862203455a8e965b121ea55345704bf968b44e2695d1b5f37164f42b33ee1a493ab9ed40f033b2d6

  • SSDEEP

    3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEYnE/oxg/:Zzx7ZApszolIo7lf/ipT/o

Malware Config

Extracted

Family

azorult

C2

http://cd63401.tmweb.ru/index.php

Targets

    • Target

      bf17fc8b5fd7352b296218e945790ba7_JaffaCakes118

    • Size

      112KB

    • MD5

      bf17fc8b5fd7352b296218e945790ba7

    • SHA1

      efcb8c99c3d535815a87ce6f474fc0231597d663

    • SHA256

      a7644aba8dc0bfdc49829b77b36cf30ea9be628272982efd6026427e92e28f08

    • SHA512

      5dec3b91de698c922140aa0db4a469624600c4d3c4ff5589862203455a8e965b121ea55345704bf968b44e2695d1b5f37164f42b33ee1a493ab9ed40f033b2d6

    • SSDEEP

      3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEYnE/oxg/:Zzx7ZApszolIo7lf/ipT/o

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks