General

  • Target

    fe5429ab64a74a0d6f36d3ffb384e807_JaffaCakes118

  • Size

    202KB

  • Sample

    240929-mf433atcnh

  • MD5

    fe5429ab64a74a0d6f36d3ffb384e807

  • SHA1

    a4036eee39637f6722d94299f4e0aab90e7a3305

  • SHA256

    dc472da1c1c3abca694aebb1dc27bd2b7ae224119ee9fcd1caffd9305e9b20fa

  • SHA512

    878f3d825c6d6e5a1e6057e35ae9cf21640352c1d2ef3d94c6b7d1a985936d420fdcfc4a73a418df54c1440b5c7c66baa77cd674705ff69603146021fe2bcdcd

  • SSDEEP

    3072:UYhLT4Wqg5yXSIUy4ZTmEneHzrqzBC4aT56Im8vwQjULhaqgVm:1hn4I1TZiSiqzraT5g8vwQjU9Lg

Malware Config

Extracted

Family

azorult

C2

http://185.178.46.120/p/index.php

Targets

    • Target

      fe5429ab64a74a0d6f36d3ffb384e807_JaffaCakes118

    • Size

      202KB

    • MD5

      fe5429ab64a74a0d6f36d3ffb384e807

    • SHA1

      a4036eee39637f6722d94299f4e0aab90e7a3305

    • SHA256

      dc472da1c1c3abca694aebb1dc27bd2b7ae224119ee9fcd1caffd9305e9b20fa

    • SHA512

      878f3d825c6d6e5a1e6057e35ae9cf21640352c1d2ef3d94c6b7d1a985936d420fdcfc4a73a418df54c1440b5c7c66baa77cd674705ff69603146021fe2bcdcd

    • SSDEEP

      3072:UYhLT4Wqg5yXSIUy4ZTmEneHzrqzBC4aT56Im8vwQjULhaqgVm:1hn4I1TZiSiqzraT5g8vwQjU9Lg

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks