General

  • Target

    86bf66df2acbb1fb88db9b38c4dea746_JaffaCakes118

  • Size

    662KB

  • Sample

    241102-wadtcs1cjg

  • MD5

    86bf66df2acbb1fb88db9b38c4dea746

  • SHA1

    b67192f0268f1a9f24aa36ee3787f93192ffb194

  • SHA256

    a86dd3e06fc22b36fec7d577251ea051b38d02c95608a806895c34119769abf9

  • SHA512

    ccf63106c48e7257d9f42f210701477fdb5028f9cd89428085e18f3c11b89668200ebeb66bc9a743c968938f09aefd8a959b0995a0a9aa982aceb44906108323

  • SSDEEP

    12288:OpeV3CZrqhwjMLJ2R46pJEq/y6INX6LRgU7e96ptgzMYTmsZHwA+J:mUwQLJ2RHGq/wKgD6goYTfWzJ

Malware Config

Extracted

Family

azorult

C2

http://37.0.10.102/rut/index.php

Targets

    • Target

      86bf66df2acbb1fb88db9b38c4dea746_JaffaCakes118

    • Size

      662KB

    • MD5

      86bf66df2acbb1fb88db9b38c4dea746

    • SHA1

      b67192f0268f1a9f24aa36ee3787f93192ffb194

    • SHA256

      a86dd3e06fc22b36fec7d577251ea051b38d02c95608a806895c34119769abf9

    • SHA512

      ccf63106c48e7257d9f42f210701477fdb5028f9cd89428085e18f3c11b89668200ebeb66bc9a743c968938f09aefd8a959b0995a0a9aa982aceb44906108323

    • SSDEEP

      12288:OpeV3CZrqhwjMLJ2R46pJEq/y6INX6LRgU7e96ptgzMYTmsZHwA+J:mUwQLJ2RHGq/wKgD6goYTfWzJ

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Azorult family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks