General

  • Target

    dab00e1832cf7cedbdd2b9447a049d50_JaffaCakes118

  • Size

    213KB

  • Sample

    240911-s8exjayelq

  • MD5

    dab00e1832cf7cedbdd2b9447a049d50

  • SHA1

    c79d8cf491ac150a6255fa8d0b700a26b014f212

  • SHA256

    cde833989e07cc2e5fa254c488ea060f3ff84f74506cc10a6baa8daac081bc99

  • SHA512

    aec8b64e7d94b24a333138fef12e25a85cf98117bc1489cae50a038ed135703895f1b0ec05f67868fe6429488d316593bfd40c6371aae2160865564ecc34087d

  • SSDEEP

    3072:GfBLDJanbg9SX56My5wmRpthBBNQbRUre83ADKDYykVouMKV7fd9u+4E:GxDEbnX5Xyam3n2P+A7yoo6H9N

Malware Config

Extracted

Family

azorult

C2

http://securebootstraupusa.xyz/index.php

Targets

    • Target

      dab00e1832cf7cedbdd2b9447a049d50_JaffaCakes118

    • Size

      213KB

    • MD5

      dab00e1832cf7cedbdd2b9447a049d50

    • SHA1

      c79d8cf491ac150a6255fa8d0b700a26b014f212

    • SHA256

      cde833989e07cc2e5fa254c488ea060f3ff84f74506cc10a6baa8daac081bc99

    • SHA512

      aec8b64e7d94b24a333138fef12e25a85cf98117bc1489cae50a038ed135703895f1b0ec05f67868fe6429488d316593bfd40c6371aae2160865564ecc34087d

    • SSDEEP

      3072:GfBLDJanbg9SX56My5wmRpthBBNQbRUre83ADKDYykVouMKV7fd9u+4E:GxDEbnX5Xyam3n2P+A7yoo6H9N

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks