General

  • Target

    cad776cd03db4ba1f9ae05a62930ad28_JaffaCakes118

  • Size

    4.7MB

  • Sample

    240830-ppjjtsvgjk

  • MD5

    cad776cd03db4ba1f9ae05a62930ad28

  • SHA1

    bd854ad7dbe3a348f1ca8c42215624c50da0a581

  • SHA256

    e28ed167658b644a68b29997cf44b98d57af1b8c87dce864f39ff3de8453fceb

  • SHA512

    ab0704bc9320e3bd77f4cd1fa20fe27924ece82f94689fb1e2b0120e64f87d99aada150f7dfa8cf7699a86ea6637988ee0f78e62cea4a7015da1f38ca6fb4ae3

  • SSDEEP

    98304:RfiwlLEytI5Iwe+CL9fHp5mkBydF/8iYwbT9FVhCdXO2z:R9ayOZyR/p0kaFksPVhCdXO6

Malware Config

Extracted

Family

azorult

C2

http://pafospanel.zzz.com.ua/index.php

Targets

    • Target

      cad776cd03db4ba1f9ae05a62930ad28_JaffaCakes118

    • Size

      4.7MB

    • MD5

      cad776cd03db4ba1f9ae05a62930ad28

    • SHA1

      bd854ad7dbe3a348f1ca8c42215624c50da0a581

    • SHA256

      e28ed167658b644a68b29997cf44b98d57af1b8c87dce864f39ff3de8453fceb

    • SHA512

      ab0704bc9320e3bd77f4cd1fa20fe27924ece82f94689fb1e2b0120e64f87d99aada150f7dfa8cf7699a86ea6637988ee0f78e62cea4a7015da1f38ca6fb4ae3

    • SSDEEP

      98304:RfiwlLEytI5Iwe+CL9fHp5mkBydF/8iYwbT9FVhCdXO2z:R9ayOZyR/p0kaFksPVhCdXO6

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks