Overview

overview

10

Static

static

3

ca9c1a994d...18.exe

windows7-x64

10

ca9c1a994d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca9c1a994d68d53ee39a8cfda29351cd_JaffaCakes118

  • Size

    384KB

  • Sample

    240830-lyny5azblq

  • MD5

    ca9c1a994d68d53ee39a8cfda29351cd

  • SHA1

    e95d2b00c87f2eb17d63e9d9283eefc9262c6e73

  • SHA256

    1e25827746135433d50c56a40e4d6663485558e3123546ec51ca7bee0ce60354

  • SHA512

    a85e833129be3426b588437b4540bbffbd85aa601a2051192db08d1a15094fa73311de8f490f1ea34ad2bba8b1c057cd61a7d0d1f291f38feb38c8a2f7e7699f

  • SSDEEP

    6144:hbR5VB07rMMHKrSzOByLJAh5mkoFTP0y1YDZM0LYyR1:rBuKrBa28P0w4RLZR

Score
10/10
azorultdiscoveryinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://g4rm0n.had.su/index.php

Targets

    • Target

      ca9c1a994d68d53ee39a8cfda29351cd_JaffaCakes118

    • Size

      384KB

    • MD5

      ca9c1a994d68d53ee39a8cfda29351cd

    • SHA1

      e95d2b00c87f2eb17d63e9d9283eefc9262c6e73

    • SHA256

      1e25827746135433d50c56a40e4d6663485558e3123546ec51ca7bee0ce60354

    • SHA512

      a85e833129be3426b588437b4540bbffbd85aa601a2051192db08d1a15094fa73311de8f490f1ea34ad2bba8b1c057cd61a7d0d1f291f38feb38c8a2f7e7699f

    • SSDEEP

      6144:hbR5VB07rMMHKrSzOByLJAh5mkoFTP0y1YDZM0LYyR1:rBuKrBa28P0w4RLZR

    Score
    10/10
    azorultdiscoveryinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks