General
- Target jaffacakes118_Trojan-PSW.Win32.Coins.slc.fc95fab161a07920f58d28433bfbd909
- Size 1.1MB
- Sample261010-pdsclagg77
- SHA256 cec38b5e734671094bbcfd77916dbf5ae6724ca92faeb748888978ada33d3af0
- MD5 fc95fab161a07920f58d28433bfbd909
- SHA1 c84c931f951a5be737b622ee5449de9b2f07044f
- SHA512 f7a609f66f03db19bb4a44190b6f9e0307c15aa405a127ebfe53c7e486e01db776693a97bd4c5e358e0e9cd659759fa8eee5800ea4b9ea7573023e4a55ff4708
- SSDEEP 24576:dAHnh+eWsN3skA4RV1Hom2KXMmHacOZMAahY1LpNJQ/05Y5:8h+ZkldoPK8Yaco1LTJQy6
- TLSH T11A45BE1273D2C03AFFAB92739B69F60556BC79250133852F13981DB9BD702B2267D263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-PSW.Win32.Coins.slc.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-PSW.Win32.Coins.slc.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://batoni.xyz/index.php
Targets
-
- Target jaffacakes118_Trojan-PSW.Win32.Coins.slc.fc95fab161a07920f58d28433bfbd909
- Size 1.1MB
- SHA256 cec38b5e734671094bbcfd77916dbf5ae6724ca92faeb748888978ada33d3af0
- MD5 fc95fab161a07920f58d28433bfbd909
- SHA1 c84c931f951a5be737b622ee5449de9b2f07044f
- SHA512 f7a609f66f03db19bb4a44190b6f9e0307c15aa405a127ebfe53c7e486e01db776693a97bd4c5e358e0e9cd659759fa8eee5800ea4b9ea7573023e4a55ff4708
- SSDEEP 24576:dAHnh+eWsN3skA4RV1Hom2KXMmHacOZMAahY1LpNJQ/05Y5:8h+ZkldoPK8Yaco1LTJQy6
- TLSH T11A45BE1273D2C03AFFAB92739B69F60556BC79250133852F13981DB9BD702B2267D263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext