General

  • Target

    d5c220b8a3ea5d0a6b1be75a1089afbe_JaffaCakes118

  • Size

    112KB

  • Sample

    240909-gsagbsvcln

  • MD5

    d5c220b8a3ea5d0a6b1be75a1089afbe

  • SHA1

    ea218080f43ba761deabf84db8b1023e4462156c

  • SHA256

    b876e4462ef60b55c287fcd39b31b0fb7ba23926deab1d5f690216512bfc9ba2

  • SHA512

    4c25387ea2ac4dc3b1f70d8828a39b98ab9ed5d1eac380567052b1cb9c2a5cb162231c3e56a29650c02c61286ac2fbab87fe366909f25e1fc8b8e66a617ce907

  • SSDEEP

    3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/lxg/:Zzx7ZApszolIo7lf/ipT/l

Malware Config

Extracted

Family

azorult

C2

http://microchiip.com/turbo/

Targets

    • Target

      d5c220b8a3ea5d0a6b1be75a1089afbe_JaffaCakes118

    • Size

      112KB

    • MD5

      d5c220b8a3ea5d0a6b1be75a1089afbe

    • SHA1

      ea218080f43ba761deabf84db8b1023e4462156c

    • SHA256

      b876e4462ef60b55c287fcd39b31b0fb7ba23926deab1d5f690216512bfc9ba2

    • SHA512

      4c25387ea2ac4dc3b1f70d8828a39b98ab9ed5d1eac380567052b1cb9c2a5cb162231c3e56a29650c02c61286ac2fbab87fe366909f25e1fc8b8e66a617ce907

    • SSDEEP

      3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/lxg/:Zzx7ZApszolIo7lf/ipT/l

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks