General
-
Target
916522d824b2c07ad6c3cdfc2a0e8cfd_JaffaCakes118
-
Size
1.2MB
-
Sample
241123-3xwq1szjfk
-
MD5
916522d824b2c07ad6c3cdfc2a0e8cfd
-
SHA1
b1a18537d9bd5791c74814eb3cdfd2fe76859e25
-
SHA256
63dfc96eb2d9a97481ad6bc19b62a0aa04891cbaf60257038649b4116c50780e
-
SHA512
ed5474897f85a057203bb8af2df986231085e1e06cc30ac5607f3cc6bcfd33854ee4835ee58cf9ca35940353cf7590b34c4af7379d7b2c4092540ddd7f27bc0c
-
SSDEEP
24576:Mtb20pkaCqT5TBWgNQ7agAZQxYZV4RRAqL16A:1Vg5tQ7agg0YpC5
Static task
static1
Behavioral task
behavioral1
Sample
916522d824b2c07ad6c3cdfc2a0e8cfd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
916522d824b2c07ad6c3cdfc2a0e8cfd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
azorult
http://max.u8f3e5jq.ru/index.php
Targets
-
-
Target
916522d824b2c07ad6c3cdfc2a0e8cfd_JaffaCakes118
-
Size
1.2MB
-
MD5
916522d824b2c07ad6c3cdfc2a0e8cfd
-
SHA1
b1a18537d9bd5791c74814eb3cdfd2fe76859e25
-
SHA256
63dfc96eb2d9a97481ad6bc19b62a0aa04891cbaf60257038649b4116c50780e
-
SHA512
ed5474897f85a057203bb8af2df986231085e1e06cc30ac5607f3cc6bcfd33854ee4835ee58cf9ca35940353cf7590b34c4af7379d7b2c4092540ddd7f27bc0c
-
SSDEEP
24576:Mtb20pkaCqT5TBWgNQ7agAZQxYZV4RRAqL16A:1Vg5tQ7agg0YpC5
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Azorult family
-
Suspicious use of SetThreadContext
-