Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
07-09-2024 03:08
General
-
Target
d0f30e4ba8ea3b8e916a39e828a8f0f8_JaffaCakes118.exe
-
Size
280KB
-
MD5
d0f30e4ba8ea3b8e916a39e828a8f0f8
-
SHA1
161ddb96b8768602316bda4d12e1f6b939b262b2
-
SHA256
977aeca56d2323d837bfd1cc93845711d998acc118f0b376f180e8371d56d1d6
-
SHA512
c7f5f7939c6b69b4051cfa97407779e4b4cd89441299b8158bfbb25d3cc8a3127dccb954ced4f1c7cb5d0cb24d72d810b0f843da34579b1f1fa6e75e4a5d8111
-
SSDEEP
6144:hxeMuLHzaDLi8CxkWuSPFkx610RtNVhEFCL+b09M//:u78Cx+StkUgtNVQEm0i/
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://neediloveyou.com/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d0f30e4ba8ea3b8e916a39e828a8f0f8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d0f30e4ba8ea3b8e916a39e828a8f0f8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
128KB
-
Filesize
876KB
-
Filesize
128KB