General
- Target jaffacakes118_Trojan-PSW.Win32.Coins.rhz.faf365e8ad025adb6dc6386ce0fe0cd7
- Size 1.1MB
- Sample261010-pdqh1agg76
- SHA256 56272ca1946cd010c94095896bd922660695d0ff7215459b7326333e1299994e
- MD5 faf365e8ad025adb6dc6386ce0fe0cd7
- SHA1 cbbc0e8be47e6f02ab00758703124e87094e4d3e
- SHA512 72810691dcdfe8f017cd1b15204a59f0ee0092cd91ce77d40d14b93e2e6bcc4febe5d4cd8d69bf4292aebf4a756c1b05a6db423e28b7053f61d564500fd1ce15
- SSDEEP 24576:oAHnh+eWsN3skA4RV1Hom2KXMmHa2Jhda5MuIC35:vh+ZkldoPK8Ya2JhA
- TLSH T1E835AE02B395C072FFAA92B39B25B642577D7D354133842F23983D69BD711B2123EA63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-PSW.Win32.Coins.rhz.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-PSW.Win32.Coins.rhz.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://lestonline.gq/400/index.php
Targets
-
- Target jaffacakes118_Trojan-PSW.Win32.Coins.rhz.faf365e8ad025adb6dc6386ce0fe0cd7
- Size 1.1MB
- SHA256 56272ca1946cd010c94095896bd922660695d0ff7215459b7326333e1299994e
- MD5 faf365e8ad025adb6dc6386ce0fe0cd7
- SHA1 cbbc0e8be47e6f02ab00758703124e87094e4d3e
- SHA512 72810691dcdfe8f017cd1b15204a59f0ee0092cd91ce77d40d14b93e2e6bcc4febe5d4cd8d69bf4292aebf4a756c1b05a6db423e28b7053f61d564500fd1ce15
- SSDEEP 24576:oAHnh+eWsN3skA4RV1Hom2KXMmHa2Jhda5MuIC35:vh+ZkldoPK8Ya2JhA
- TLSH T1E835AE02B395C072FFAA92B39B25B642577D7D354133842F23983D69BD711B2123EA63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext