Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
30-10-2024 22:44
General
-
Target
80784f4118d7c4d54dd555436fbd5213_JaffaCakes118.exe
-
Size
242KB
-
MD5
80784f4118d7c4d54dd555436fbd5213
-
SHA1
dd0a5e46cbd2daa4088ec0185a9f1ba238fe4ba8
-
SHA256
390724bb7df37d40b8028f27ee101903256f930df0795fe88b9f7a4ddd6a46d1
-
SHA512
0015ca19963813aab9b47207c787bab0efbcfb909c28fa915c264431f84fe8b649fdc771fdc0fc68835fc79c750911d3f92c4746049a47044cff13932c210b8e
-
SSDEEP
6144:42ASK7jM2Aqye3575wB/WarzFWIgc7zCw:Ov7L6a5+BXzFWHw
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://systemwebanalytycs.com/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Azorult family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\80784f4118d7c4d54dd555436fbd5213_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\80784f4118d7c4d54dd555436fbd5213_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
516KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
548KB
-
Filesize
548KB
-
Filesize
548KB
-
Filesize
1024KB
-
Filesize
516KB
-
Filesize
548KB