General

  • Target

    f9a154b4fabb4a3255103aca18120983_JaffaCakes118

  • Size

    233KB

  • Sample

    240927-d3d1qataqk

  • MD5

    f9a154b4fabb4a3255103aca18120983

  • SHA1

    e21ee3ecb91c5f5288aaf1daa8a6bcd0515d41aa

  • SHA256

    63819eb8d048de1b8bdc6f63f313ef81fea423f55d4224ff893094b9bf50d39d

  • SHA512

    06cf03b296ea8e1acfeae8b37cf432a849c673aabedf84e74420e6aa5f1e5fb0349010f5e22e73ad41c3a21289b97caeee8f5a81603c36c2428e0e063f5d91b9

  • SSDEEP

    3072:tD5G9O/4JUp7pJRTm7aTO6T8XI7VWC1/H11ISqp55H4c8zw8y:uUwmFJRShQ8XUjjEjHr8zwz

Malware Config

Extracted

Family

azorult

C2

http://login.giocherialaragnatela.it/azs/index.php

Targets

    • Target

      f9a154b4fabb4a3255103aca18120983_JaffaCakes118

    • Size

      233KB

    • MD5

      f9a154b4fabb4a3255103aca18120983

    • SHA1

      e21ee3ecb91c5f5288aaf1daa8a6bcd0515d41aa

    • SHA256

      63819eb8d048de1b8bdc6f63f313ef81fea423f55d4224ff893094b9bf50d39d

    • SHA512

      06cf03b296ea8e1acfeae8b37cf432a849c673aabedf84e74420e6aa5f1e5fb0349010f5e22e73ad41c3a21289b97caeee8f5a81603c36c2428e0e063f5d91b9

    • SSDEEP

      3072:tD5G9O/4JUp7pJRTm7aTO6T8XI7VWC1/H11ISqp55H4c8zw8y:uUwmFJRShQ8XUjjEjHr8zwz

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks