Analysis
-
max time kernel
91s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09-09-2024 06:03
General
-
Target
d5c220b8a3ea5d0a6b1be75a1089afbe_JaffaCakes118.exe
-
Size
112KB
-
MD5
d5c220b8a3ea5d0a6b1be75a1089afbe
-
SHA1
ea218080f43ba761deabf84db8b1023e4462156c
-
SHA256
b876e4462ef60b55c287fcd39b31b0fb7ba23926deab1d5f690216512bfc9ba2
-
SHA512
4c25387ea2ac4dc3b1f70d8828a39b98ab9ed5d1eac380567052b1cb9c2a5cb162231c3e56a29650c02c61286ac2fbab87fe366909f25e1fc8b8e66a617ce907
-
SSDEEP
3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/lxg/:Zzx7ZApszolIo7lf/ipT/l
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://microchiip.com/turbo/
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d5c220b8a3ea5d0a6b1be75a1089afbe_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d5c220b8a3ea5d0a6b1be75a1089afbe_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB