General

  • Target

    JaffaCakes118_11565ff3e7b612eaa196463bc850947bab33f4e83c6faaf29b4128e4ee5808bc

  • Size

    592KB

  • Sample

    241223-wd521swpa1

  • MD5

    3a11429d4e0d568e3fc274dcd5429313

  • SHA1

    75ba081d905048a40bacb096c611003ade2dc69b

  • SHA256

    11565ff3e7b612eaa196463bc850947bab33f4e83c6faaf29b4128e4ee5808bc

  • SHA512

    f2fc3bb17872b920b691abd62db70c2b0f27b7102b427914654f6626ac8671498e29d333afc04ffa315bf9b1725f99344717168468ec4e2a3a70b660f1250ee2

  • SSDEEP

    12288:2mUNW6eJhnJiYpp/Dui9yQNBOP4Tv3mwZaVqQ4ZZCQPh192d0BpBi:voKhJiIp/Dusy+BOP2vH828QPrUsi

Malware Config

Extracted

Family

azorult

C2

http://carolinascarpelini.com.br/set/node/index.php

Targets

    • Target

      8a7136d6f15d4d79c4d1b89e39ac1c8678c49649d66a451c90a135e4db278b6b

    • Size

      673KB

    • MD5

      a9aa5cc96156193b9e742b2b05c111b9

    • SHA1

      d352379eab94a73f6289af90877def65385e8b2a

    • SHA256

      8a7136d6f15d4d79c4d1b89e39ac1c8678c49649d66a451c90a135e4db278b6b

    • SHA512

      aef3b9168d3dbaedd66dcb0450a7512bd40fdeb7d8aa2bd9b2c44f4f9d17245c26cbd368755bfee04d85e68c6c200a8e4dcdfb0e54015c51fe25df335a272561

    • SSDEEP

      12288:6tEn22jblqFTdnsgNILprnbrJZhltmRcrFjEYW5t:6qlqFps6ILprnb9Z3tAchY9

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Azorult family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks