Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
15-09-2024 14:55
General
-
Target
e2bf60c62f146a241c582c3d03f77eb8_JaffaCakes118.exe
-
Size
112KB
-
MD5
e2bf60c62f146a241c582c3d03f77eb8
-
SHA1
bdee91e54e97ade62178511e6c25d66d77aeaf95
-
SHA256
c69ab0ae1db97cd5a3f99880a111ac13da5bf40a2aab0b073a074a7249008bc3
-
SHA512
4b231b0682a990d8bb3d035d190d9bda9648a56178c2d3e5df75eec4d726d05569b19d68357258ade0969cd5551686d641e7bd3ae4110e92022ba4a4e5fb38b4
-
SSDEEP
3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/vxg/:Zzx7ZApszolIo7lf/ipT/v
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://t1t2.xyz/kirch/3.2/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e2bf60c62f146a241c582c3d03f77eb8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e2bf60c62f146a241c582c3d03f77eb8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB