General
-
Target
0ef724276b3aa26af86f5d8dec90ba17_JaffaCakes118
-
Size
856KB
-
Sample
241003-lgfw7awdkr
-
MD5
0ef724276b3aa26af86f5d8dec90ba17
-
SHA1
6f3cc71f37eb73efebf692ed81a99ed99f0951bf
-
SHA256
5c8a00f19dace48b0e1575c9def40afc45dfdd0c81aec27e99c133304aa14075
-
SHA512
23e07d32a1d182034c8e412656e67ba2c86df25bf08fb9238291e02d818b61af7c5a5689ca362c3e881d5355f844ec3eaec1b9c909c37062a18f5128e8a9a859
-
SSDEEP
12288:EDiisodHEp+wiV7tXfXACLI15sxxLU9Gep4jVGBXM:Em5oBEkw6twsxxLUV4huM
Static task
static1
Behavioral task
behavioral1
Sample
0ef724276b3aa26af86f5d8dec90ba17_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ef724276b3aa26af86f5d8dec90ba17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
azorult
http://uspool.softopia.site/vvv/index.php
Targets
-
-
Target
0ef724276b3aa26af86f5d8dec90ba17_JaffaCakes118
-
Size
856KB
-
MD5
0ef724276b3aa26af86f5d8dec90ba17
-
SHA1
6f3cc71f37eb73efebf692ed81a99ed99f0951bf
-
SHA256
5c8a00f19dace48b0e1575c9def40afc45dfdd0c81aec27e99c133304aa14075
-
SHA512
23e07d32a1d182034c8e412656e67ba2c86df25bf08fb9238291e02d818b61af7c5a5689ca362c3e881d5355f844ec3eaec1b9c909c37062a18f5128e8a9a859
-
SSDEEP
12288:EDiisodHEp+wiV7tXfXACLI15sxxLU9Gep4jVGBXM:Em5oBEkw6twsxxLUV4huM
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext
-