Overview

overview

10

Static

static

3

f7ba6e7c61...18.exe

windows7-x64

10

f7ba6e7c61...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7ba6e7c616e4e29f387fdd03c8ec706_JaffaCakes118

  • Size

    366KB

  • Sample

    240926-gs1nhs1fpq

  • MD5

    f7ba6e7c616e4e29f387fdd03c8ec706

  • SHA1

    351d3353383f8fbf3f42172f84ba302fd904fb0d

  • SHA256

    f3565491d1d16995388ef66662cd14aad7dd1d8d3acb57178c6da87ecbb57603

  • SHA512

    193939e15cb54c5f2b4f0b30548b7b4cd557afc5dbb443e4dbcbafda7f50e54c4179d71bed96a7bbba3862e1c10e51bdc2641087f6eac7175d2bf51158379d81

  • SSDEEP

    6144:nBHpoPHGXWkFO9bKuFhDaDkVLzZM0OcNUJGZOb7g403UMdECpIigrkeX5KqZcTsO:ZePmXWkF6Ku9DOvtKUM+Cerh5KqZ4

Score
10/10
azorultdiscoveryinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://aluibin.com/ama/index.php

Targets

    • Target

      f7ba6e7c616e4e29f387fdd03c8ec706_JaffaCakes118

    • Size

      366KB

    • MD5

      f7ba6e7c616e4e29f387fdd03c8ec706

    • SHA1

      351d3353383f8fbf3f42172f84ba302fd904fb0d

    • SHA256

      f3565491d1d16995388ef66662cd14aad7dd1d8d3acb57178c6da87ecbb57603

    • SHA512

      193939e15cb54c5f2b4f0b30548b7b4cd557afc5dbb443e4dbcbafda7f50e54c4179d71bed96a7bbba3862e1c10e51bdc2641087f6eac7175d2bf51158379d81

    • SSDEEP

      6144:nBHpoPHGXWkFO9bKuFhDaDkVLzZM0OcNUJGZOb7g403UMdECpIigrkeX5KqZcTsO:ZePmXWkF6Ku9DOvtKUM+Cerh5KqZ4

    Score
    10/10
    azorultdiscoveryinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks