General

  • Target

    10a34640fba05520712254b9b9405be0_JaffaCakes118

  • Size

    367KB

  • Sample

    240626-egb5nstcjb

  • MD5

    10a34640fba05520712254b9b9405be0

  • SHA1

    4312126f7c95d384c0dd82e23565090563274a39

  • SHA256

    9c99458e7cca21da41178cdff64715ced87e03fe61e33182854e4b0438b3b1f9

  • SHA512

    cea4500db17d80b5acee020197246b8188dbee320116e95639617fe4fce8290abef281d492f4f097aa7a014263ffbe521505cba1618ddf031c310bca42e117c9

  • SSDEEP

    6144:hw5nKlNFAmzKpQl/nTWrCPPsD8xJpzPNXtSlpL+pyxmjO+moBAZXUBgGnLU:OuDAmRLWrxD8xDzPNdSlpL+ywjrmQAZR

Malware Config

Extracted

Family

azorult

C2

https://corpcougar.com/bguy/32/index.php

Targets

    • Target

      10a34640fba05520712254b9b9405be0_JaffaCakes118

    • Size

      367KB

    • MD5

      10a34640fba05520712254b9b9405be0

    • SHA1

      4312126f7c95d384c0dd82e23565090563274a39

    • SHA256

      9c99458e7cca21da41178cdff64715ced87e03fe61e33182854e4b0438b3b1f9

    • SHA512

      cea4500db17d80b5acee020197246b8188dbee320116e95639617fe4fce8290abef281d492f4f097aa7a014263ffbe521505cba1618ddf031c310bca42e117c9

    • SSDEEP

      6144:hw5nKlNFAmzKpQl/nTWrCPPsD8xJpzPNXtSlpL+pyxmjO+moBAZXUBgGnLU:OuDAmRLWrxD8xDzPNdSlpL+ywjrmQAZR

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks