General

  • Target

    0ef724276b3aa26af86f5d8dec90ba17_JaffaCakes118

  • Size

    856KB

  • Sample

    241003-lgfw7awdkr

  • MD5

    0ef724276b3aa26af86f5d8dec90ba17

  • SHA1

    6f3cc71f37eb73efebf692ed81a99ed99f0951bf

  • SHA256

    5c8a00f19dace48b0e1575c9def40afc45dfdd0c81aec27e99c133304aa14075

  • SHA512

    23e07d32a1d182034c8e412656e67ba2c86df25bf08fb9238291e02d818b61af7c5a5689ca362c3e881d5355f844ec3eaec1b9c909c37062a18f5128e8a9a859

  • SSDEEP

    12288:EDiisodHEp+wiV7tXfXACLI15sxxLU9Gep4jVGBXM:Em5oBEkw6twsxxLUV4huM

Malware Config

Extracted

Family

azorult

C2

http://uspool.softopia.site/vvv/index.php

Targets

    • Target

      0ef724276b3aa26af86f5d8dec90ba17_JaffaCakes118

    • Size

      856KB

    • MD5

      0ef724276b3aa26af86f5d8dec90ba17

    • SHA1

      6f3cc71f37eb73efebf692ed81a99ed99f0951bf

    • SHA256

      5c8a00f19dace48b0e1575c9def40afc45dfdd0c81aec27e99c133304aa14075

    • SHA512

      23e07d32a1d182034c8e412656e67ba2c86df25bf08fb9238291e02d818b61af7c5a5689ca362c3e881d5355f844ec3eaec1b9c909c37062a18f5128e8a9a859

    • SSDEEP

      12288:EDiisodHEp+wiV7tXfXACLI15sxxLU9Gep4jVGBXM:Em5oBEkw6twsxxLUV4huM

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks