General

  • Target

    JaffaCakes118_f327bf8e110d7524c6a73089674c1c91d66827aac0fbfeed8064369ef89b9223

  • Size

    1008KB

  • Sample

    241230-ganagazmax

  • MD5

    0cadd6651502535b128cd1b25ea79000

  • SHA1

    d5904aa9c0edad6b8f1a89f94ceb4deb7894446c

  • SHA256

    f327bf8e110d7524c6a73089674c1c91d66827aac0fbfeed8064369ef89b9223

  • SHA512

    9c68359f40d4c0774b4e709901f2c8027c6d4f2c8cac05cc8568de150e5175ec529a2affa962568f91711a8e2bc5ae3f8ba537c915ab6b0de666fd98b2992334

  • SSDEEP

    24576:hP2tqjTUyMCS4/nZeXTpRMzfCPc0NKauYyFliUl:skTP64B+HAfl7aY0Ul

Malware Config

Extracted

Family

azorult

C2

https://squerad.com/gold/index.php

Targets

    • Target

      b7faff42bd8ff4aa83a81bc6a800b11802a7a8a76858dbc9ebcef72dad744913

    • Size

      1.1MB

    • MD5

      7fb874ad62ca9d8b708820e5bff41143

    • SHA1

      401dd7cb672472a2629bc7e1f5bf0bdec979bd70

    • SHA256

      b7faff42bd8ff4aa83a81bc6a800b11802a7a8a76858dbc9ebcef72dad744913

    • SHA512

      ee9d05f6ffc7833aa97140a6b81906369d5807456391cb23510b1585da771d4e05fdbac0589d4dce874bab893c0cc8bb4e0e8a774aca4a0e0878ba2c40370193

    • SSDEEP

      24576:MTjWDWFOBBH5W/LRJAPBEml0qW/4TW65Kls4:MHQBBH5W/LAPHPW/4TW65KS

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Azorult family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks