General

  • Target

    d893d8347ecad1a3d85064d2f5bded4f_JaffaCakes118

  • Size

    735KB

  • Sample

    240910-tt2cnatgrb

  • MD5

    d893d8347ecad1a3d85064d2f5bded4f

  • SHA1

    46c479dfd30d125df6a994d35e7bdd34a798b872

  • SHA256

    e7b0f2bc7bf690c704dd2411114c0f985d2c1994a6d9e0941aa50efb3515bd6e

  • SHA512

    7373806c5d24bd5af3439d0c19e5bd26ea3e5918374d2182f1e01b104d9176caec9d6b0160c8e66fde2e5d7c68340a6247bc71b335d8383e9fd072aca4282048

  • SSDEEP

    12288:3W68EkTM44pJrvmHazHj/5lkF128bC2XIcxZ+Db7NX0j:MFgdbvmHazDgF12CBXVnabpXq

Malware Config

Extracted

Family

azorult

C2

http://tohertgopening.com/index.php

Targets

    • Target

      d893d8347ecad1a3d85064d2f5bded4f_JaffaCakes118

    • Size

      735KB

    • MD5

      d893d8347ecad1a3d85064d2f5bded4f

    • SHA1

      46c479dfd30d125df6a994d35e7bdd34a798b872

    • SHA256

      e7b0f2bc7bf690c704dd2411114c0f985d2c1994a6d9e0941aa50efb3515bd6e

    • SHA512

      7373806c5d24bd5af3439d0c19e5bd26ea3e5918374d2182f1e01b104d9176caec9d6b0160c8e66fde2e5d7c68340a6247bc71b335d8383e9fd072aca4282048

    • SSDEEP

      12288:3W68EkTM44pJrvmHazHj/5lkF128bC2XIcxZ+Db7NX0j:MFgdbvmHazDgF12CBXVnabpXq

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks