Overview

overview

10

Static

static

3

fbd1a80389...18.exe

windows7-x64

10

fbd1a80389...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbd1a80389d206f33ade62eed461a83c_JaffaCakes118

  • Size

    934KB

  • Sample

    241218-q9stnssmbr

  • MD5

    fbd1a80389d206f33ade62eed461a83c

  • SHA1

    9052dce7eee7512718c4c3fd5912f41b2bd2439f

  • SHA256

    6e3efa36db00f2ffa417f70f688f1987861fe0281e809eba4ce7c285ab3da556

  • SHA512

    45af32a620b3790c36cdf62365ce12ed7abb42fb7e12a04ab48b0e049c1bef76155b7dcebad6025c7fc03f17cb96649f2af4b744482c1ffa6499d2ab432bcc47

  • SSDEEP

    12288:JCnArJmgeR3svVGf28ofhnEYDKF9eYoJEGPz2+tkqFhqZ5R:Jmf3sv18ofxEYD29fmlPiqFwZ

Score
10/10
azorultdiscoveryinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://savacons.com/wp-az/index.php

Targets

    • Target

      fbd1a80389d206f33ade62eed461a83c_JaffaCakes118

    • Size

      934KB

    • MD5

      fbd1a80389d206f33ade62eed461a83c

    • SHA1

      9052dce7eee7512718c4c3fd5912f41b2bd2439f

    • SHA256

      6e3efa36db00f2ffa417f70f688f1987861fe0281e809eba4ce7c285ab3da556

    • SHA512

      45af32a620b3790c36cdf62365ce12ed7abb42fb7e12a04ab48b0e049c1bef76155b7dcebad6025c7fc03f17cb96649f2af4b744482c1ffa6499d2ab432bcc47

    • SSDEEP

      12288:JCnArJmgeR3svVGf28ofhnEYDKF9eYoJEGPz2+tkqFhqZ5R:Jmf3sv18ofxEYD29fmlPiqFwZ

    Score
    10/10
    azorultdiscoveryinfostealertrojan

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

      trojaninfostealerazorult

    • Azorult family

      azorult

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks