General

  • Target

    d0f30e4ba8ea3b8e916a39e828a8f0f8_JaffaCakes118

  • Size

    280KB

  • Sample

    240907-dm6qssscrc

  • MD5

    d0f30e4ba8ea3b8e916a39e828a8f0f8

  • SHA1

    161ddb96b8768602316bda4d12e1f6b939b262b2

  • SHA256

    977aeca56d2323d837bfd1cc93845711d998acc118f0b376f180e8371d56d1d6

  • SHA512

    c7f5f7939c6b69b4051cfa97407779e4b4cd89441299b8158bfbb25d3cc8a3127dccb954ced4f1c7cb5d0cb24d72d810b0f843da34579b1f1fa6e75e4a5d8111

  • SSDEEP

    6144:hxeMuLHzaDLi8CxkWuSPFkx610RtNVhEFCL+b09M//:u78Cx+StkUgtNVQEm0i/

Malware Config

Extracted

Family

azorult

C2

http://neediloveyou.com/index.php

Targets

    • Target

      d0f30e4ba8ea3b8e916a39e828a8f0f8_JaffaCakes118

    • Size

      280KB

    • MD5

      d0f30e4ba8ea3b8e916a39e828a8f0f8

    • SHA1

      161ddb96b8768602316bda4d12e1f6b939b262b2

    • SHA256

      977aeca56d2323d837bfd1cc93845711d998acc118f0b376f180e8371d56d1d6

    • SHA512

      c7f5f7939c6b69b4051cfa97407779e4b4cd89441299b8158bfbb25d3cc8a3127dccb954ced4f1c7cb5d0cb24d72d810b0f843da34579b1f1fa6e75e4a5d8111

    • SSDEEP

      6144:hxeMuLHzaDLi8CxkWuSPFkx610RtNVhEFCL+b09M//:u78Cx+StkUgtNVQEm0i/

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks