Resubmissions

03-10-2024 23:17

241003-29neqswame 10

03-10-2024 15:43

241003-s5yv8swgkh 10

General

  • Target

    0f6f163d19df558e01d3edd0c6f64604_JaffaCakes118

  • Size

    322KB

  • Sample

    241003-29neqswame

  • MD5

    0f6f163d19df558e01d3edd0c6f64604

  • SHA1

    03d66cf249c2445c539286f0ed2a4e93387c2e8e

  • SHA256

    084fec54089b798a4eafa125383f09f1cdad29740f811fb531910ada45e240b4

  • SHA512

    70b69cf6f3433751ec1e29422fdab30026dea92987e17415f821b0a04a9a1c74f748e645ec2e60240fa923e398696c348d9992db3febbbd37ee8bad7c33b1e75

  • SSDEEP

    6144:I0+wdxKvZVIyMVCoIvKP2YMreWcJH0cEhWLWl5w:UwdwXIyAhhP2YMDcScEccy

Malware Config

Extracted

Family

azorult

C2

http://203.159.80.211/owe/index.php

Targets

    • Target

      0f6f163d19df558e01d3edd0c6f64604_JaffaCakes118

    • Size

      322KB

    • MD5

      0f6f163d19df558e01d3edd0c6f64604

    • SHA1

      03d66cf249c2445c539286f0ed2a4e93387c2e8e

    • SHA256

      084fec54089b798a4eafa125383f09f1cdad29740f811fb531910ada45e240b4

    • SHA512

      70b69cf6f3433751ec1e29422fdab30026dea92987e17415f821b0a04a9a1c74f748e645ec2e60240fa923e398696c348d9992db3febbbd37ee8bad7c33b1e75

    • SSDEEP

      6144:I0+wdxKvZVIyMVCoIvKP2YMreWcJH0cEhWLWl5w:UwdwXIyAhhP2YMDcScEccy

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks