General

  • Target

    e2bf60c62f146a241c582c3d03f77eb8_JaffaCakes118

  • Size

    112KB

  • Sample

    240915-sahwjayenc

  • MD5

    e2bf60c62f146a241c582c3d03f77eb8

  • SHA1

    bdee91e54e97ade62178511e6c25d66d77aeaf95

  • SHA256

    c69ab0ae1db97cd5a3f99880a111ac13da5bf40a2aab0b073a074a7249008bc3

  • SHA512

    4b231b0682a990d8bb3d035d190d9bda9648a56178c2d3e5df75eec4d726d05569b19d68357258ade0969cd5551686d641e7bd3ae4110e92022ba4a4e5fb38b4

  • SSDEEP

    3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/vxg/:Zzx7ZApszolIo7lf/ipT/v

Malware Config

Extracted

Family

azorult

C2

http://t1t2.xyz/kirch/3.2/index.php

Targets

    • Target

      e2bf60c62f146a241c582c3d03f77eb8_JaffaCakes118

    • Size

      112KB

    • MD5

      e2bf60c62f146a241c582c3d03f77eb8

    • SHA1

      bdee91e54e97ade62178511e6c25d66d77aeaf95

    • SHA256

      c69ab0ae1db97cd5a3f99880a111ac13da5bf40a2aab0b073a074a7249008bc3

    • SHA512

      4b231b0682a990d8bb3d035d190d9bda9648a56178c2d3e5df75eec4d726d05569b19d68357258ade0969cd5551686d641e7bd3ae4110e92022ba4a4e5fb38b4

    • SSDEEP

      3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/vxg/:Zzx7ZApszolIo7lf/ipT/v

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks