General

  • Target

    JaffaCakes118_e7bd15205f0432d831bac4d887b9da5417e0a5519d313af7c72715569c92e5c4

  • Size

    60KB

  • Sample

    241225-wcdw5s1mak

  • MD5

    760f054ee9b218143e2d91adb4895ffd

  • SHA1

    5f29b92951ead41ed717386bbbcdb68e9c7186cc

  • SHA256

    e7bd15205f0432d831bac4d887b9da5417e0a5519d313af7c72715569c92e5c4

  • SHA512

    3cf9763b1b726de4ce372380746f2e65335734da57d8581e4ef4f3010d1f73cff732e5c94ea1c6cbbf85e76c3ffad5d6142210220016f7297ed21c4e3a7d343b

  • SSDEEP

    1536:1HUTKyE4xKrR1JFTG/R/nJeEoNX1G038CIsyztlRTBXheL:1HiKH1F49nJeEoXGo8kyz3R1u

Malware Config

Extracted

Family

azorult

C2

http://softonicpc.com/Panel/index.php

Targets

    • Target

      1fa06bee7537ab00431f37f361c22fc500829571d4339ba58214cce3476d7176

    • Size

      112KB

    • MD5

      a895841feb482460987d19780795fc5f

    • SHA1

      05e68263c3aa8ca63b886475dd7505e6217b3c30

    • SHA256

      1fa06bee7537ab00431f37f361c22fc500829571d4339ba58214cce3476d7176

    • SHA512

      f555faddda79d3087fc70ea9b0e381da31142d61b4274d1e84b12097e915fae239e731bcc3ea63ca31a1acf0a605b1600d226df402d49eda64fee17058166a94

    • SSDEEP

      3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEYnE/nxg/:Zzx7ZApszolIo7lf/ipT/n

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Azorult family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks