Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
08-12-2024 02:20
General
-
Target
d4c7576ec36d8ed8da8385f11181f4c6_JaffaCakes118.exe
-
Size
165KB
-
MD5
d4c7576ec36d8ed8da8385f11181f4c6
-
SHA1
e6893e2b038cc15aba28e28f1ab482ffa576be9b
-
SHA256
c43f6a8baf0ad84ca756e83e47f6b47fb6cd99290d64492ee714caf04b40bfee
-
SHA512
aad0159c4d07083c5a764b45a7216e8812babb7d5d64d0b59c20b3cd1a38657e48cbe00da58b15d8168427bd41a0b3781eeeb8524e246b30cb554f44d30e9252
-
SSDEEP
3072:c45ftw60k65MOcsWkLLSsMyJ6ooYzsAdTmCCk+dj:ZUcsWkLesb63BGN
Score
10/10
Malware Config
Extracted
Family
azorult
C2
http://finlzzm.com/index.php
Signatures
-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Azorult family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d4c7576ec36d8ed8da8385f11181f4c6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d4c7576ec36d8ed8da8385f11181f4c6_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
128KB
-
Filesize
180KB
-
Filesize
128KB