General

  • Target

    916522d824b2c07ad6c3cdfc2a0e8cfd_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241123-3xwq1szjfk

  • MD5

    916522d824b2c07ad6c3cdfc2a0e8cfd

  • SHA1

    b1a18537d9bd5791c74814eb3cdfd2fe76859e25

  • SHA256

    63dfc96eb2d9a97481ad6bc19b62a0aa04891cbaf60257038649b4116c50780e

  • SHA512

    ed5474897f85a057203bb8af2df986231085e1e06cc30ac5607f3cc6bcfd33854ee4835ee58cf9ca35940353cf7590b34c4af7379d7b2c4092540ddd7f27bc0c

  • SSDEEP

    24576:Mtb20pkaCqT5TBWgNQ7agAZQxYZV4RRAqL16A:1Vg5tQ7agg0YpC5

Malware Config

Extracted

Family

azorult

C2

http://max.u8f3e5jq.ru/index.php

Targets

    • Target

      916522d824b2c07ad6c3cdfc2a0e8cfd_JaffaCakes118

    • Size

      1.2MB

    • MD5

      916522d824b2c07ad6c3cdfc2a0e8cfd

    • SHA1

      b1a18537d9bd5791c74814eb3cdfd2fe76859e25

    • SHA256

      63dfc96eb2d9a97481ad6bc19b62a0aa04891cbaf60257038649b4116c50780e

    • SHA512

      ed5474897f85a057203bb8af2df986231085e1e06cc30ac5607f3cc6bcfd33854ee4835ee58cf9ca35940353cf7590b34c4af7379d7b2c4092540ddd7f27bc0c

    • SSDEEP

      24576:Mtb20pkaCqT5TBWgNQ7agAZQxYZV4RRAqL16A:1Vg5tQ7agg0YpC5

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Azorult family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks