General

  • Target

    4bf0b38b306d337f18240d2bc2b255f4_JaffaCakes118

  • Size

    248KB

  • Sample

    241016-je84vazbqa

  • MD5

    4bf0b38b306d337f18240d2bc2b255f4

  • SHA1

    a2c15b3f4597e0fbc136d011bd0816a079ae2d76

  • SHA256

    5dd4a57bee86571b92057f4d159f97420a69ffada92fd9b51d43585bc2c0751e

  • SHA512

    8879d30d75d582fd0fc06a349d11ce84d0a22ae126e28261df42dc9ca50efae881d379ecf76e88009587f108d17d166f61fe815868725757d39b9833c252ce5b

  • SSDEEP

    3072:VmFpIAgU/2QkPGj1AZgPuBScu/YExWIP7QbG2go5xVCpgVnWScsYh6gSVywo3c+:Vb30mQ+gPuAcCzerVEgBx7knGyHM

Malware Config

Extracted

Family

azorult

C2

http://203.159.80.136/nx/index.php

Targets

    • Target

      4bf0b38b306d337f18240d2bc2b255f4_JaffaCakes118

    • Size

      248KB

    • MD5

      4bf0b38b306d337f18240d2bc2b255f4

    • SHA1

      a2c15b3f4597e0fbc136d011bd0816a079ae2d76

    • SHA256

      5dd4a57bee86571b92057f4d159f97420a69ffada92fd9b51d43585bc2c0751e

    • SHA512

      8879d30d75d582fd0fc06a349d11ce84d0a22ae126e28261df42dc9ca50efae881d379ecf76e88009587f108d17d166f61fe815868725757d39b9833c252ce5b

    • SSDEEP

      3072:VmFpIAgU/2QkPGj1AZgPuBScu/YExWIP7QbG2go5xVCpgVnWScsYh6gSVywo3c+:Vb30mQ+gPuAcCzerVEgBx7knGyHM

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

MITRE ATT&CK Enterprise v15

Tasks