Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
20-09-2024 22:59
General
-
Target
ee98be0e390b545742d741a6ab6e06f2_JaffaCakes118.exe
-
Size
279KB
-
MD5
ee98be0e390b545742d741a6ab6e06f2
-
SHA1
b34a13386185a628b4cf5f48ae15b205580a8801
-
SHA256
b5b22c5196c8dd2e5bf98c2f9f76991a4e47b6928293c1d13595fd6b368273cd
-
SHA512
9ff94536a20498874479716f4060a7424a40e0bd44fcc3f1e3de18bac078cab02d7d7be0d2f5ac11bf1b0a9f9cd3ae4e49304e1324ac21c17ef0c6f9b509f11e
-
SSDEEP
6144:bBj57uDaXKm/LI5QPTsw1mMjK48iP2S81svbzHC:37mUpE5Q73HjK+P2S1vn
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://37.46.150.24/azone/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ee98be0e390b545742d741a6ab6e06f2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ee98be0e390b545742d741a6ab6e06f2_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
-
Filesize
116KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
128KB
-
Filesize
4.6MB
-
Filesize
4.6MB
-
Filesize
128KB
-
Filesize
4.6MB