Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
25-08-2024 16:35
Static task
static1
Behavioral task
behavioral1
Sample
c124db36c6b914038abba4c57e1fc235_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c124db36c6b914038abba4c57e1fc235_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c124db36c6b914038abba4c57e1fc235_JaffaCakes118.exe
-
Size
183KB
-
MD5
c124db36c6b914038abba4c57e1fc235
-
SHA1
87116dc3a7caa0b8c4c14410664c68371e0b82ca
-
SHA256
5f6ca1dbd3875a12a765d9f83226d96ad344a2281533f72d77e7971169ac155c
-
SHA512
beab099cb68e71faa11040c60a0a485cb0426902cf230352bbc1ef163247b4d143fa963299d6e495a54dd0b73e14e3519cc47367c38ed36818a9198fe6cc68cc
-
SSDEEP
3072:KmhgUTSU+/I5ufRHLa6WwS+X9oPsZCYhsyNohdsmJlGujXlqsXN+C3:KmhgU2La6Wk9oPsZCYHNo1J4u7lBB
Malware Config
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
c124db36c6b914038abba4c57e1fc235_JaffaCakes118.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c124db36c6b914038abba4c57e1fc235_JaffaCakes118.exe