General
-
Target
dc3ddb02e50ec8b341ef958af552ea66_JaffaCakes118
-
Size
321KB
-
Sample
240912-nnxjmatcme
-
MD5
dc3ddb02e50ec8b341ef958af552ea66
-
SHA1
c967c25f164dcbf55cc59fc6125b2e1d11f4d2e0
-
SHA256
2c0aa4e25cf7b92f547d17c6078e8565f19a9115cbfa31257baaec9317419a40
-
SHA512
58f39466afb80f5acf8a01d85d912164ba5bde6881d8e2d269e58b1ed06e821ed179120a349392beb5a064a4cf9a37ec7a1cc40bd81f74d0f04ea5cf7346f5a3
-
SSDEEP
6144:BOe2W7/fkzyQ+rftJVqhlfz8W+vjloC8xMdfzLi:1LMnkwVz3ijlAcfzLi
Static task
static1
Behavioral task
behavioral1
Sample
dc3ddb02e50ec8b341ef958af552ea66_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc3ddb02e50ec8b341ef958af552ea66_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
azorult
https://ntrcgroup.com/nze/index.php
Targets
-
-
Target
dc3ddb02e50ec8b341ef958af552ea66_JaffaCakes118
-
Size
321KB
-
MD5
dc3ddb02e50ec8b341ef958af552ea66
-
SHA1
c967c25f164dcbf55cc59fc6125b2e1d11f4d2e0
-
SHA256
2c0aa4e25cf7b92f547d17c6078e8565f19a9115cbfa31257baaec9317419a40
-
SHA512
58f39466afb80f5acf8a01d85d912164ba5bde6881d8e2d269e58b1ed06e821ed179120a349392beb5a064a4cf9a37ec7a1cc40bd81f74d0f04ea5cf7346f5a3
-
SSDEEP
6144:BOe2W7/fkzyQ+rftJVqhlfz8W+vjloC8xMdfzLi:1LMnkwVz3ijlAcfzLi
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Drops startup file
-
Suspicious use of SetThreadContext
-