General
- Target jaffacakes118_Trojan-PSW.Win32.Fareit.enom.7378f71a203964b4b3887e3a68d7e541
- Size 633KB
- Sample261010-pxtd1ahc42
- SHA256 8e3e76db72505e785431bc914c3e04296052b3d1840877ca34f8109f50b12e86
- MD5 7378f71a203964b4b3887e3a68d7e541
- SHA1 3f21b944edf02d4395efd92fd77af126cb938999
- SHA512 1dbd92fb4b068cd55239eaf468e2db872b1a80561f8c9155a9acdde4f9e610b9ba7133c89413956d47703fa0a72678f2024ca6454a26b32f6f8c9746fb9fb566
- SSDEEP 12288:3pp4bCnXEKgq9BRoltLBqIWjb+VTJeTiWmpLQLLLLyLLLLLLLOLLLLLLLLVLLLLX:74GnXExq9B2L1dT4TiWm
- TLSH T14CD402D4BED1CC3AC7A251764170BE423EEE6E6941EC46CBD7A81E58DE35448EC1CA0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-PSW.Win32.Fareit.enom.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-PSW.Win32.Fareit.enom.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://dx3b8mbs.xyz/AU2/gate.php
Targets
-
- Target jaffacakes118_Trojan-PSW.Win32.Fareit.enom.7378f71a203964b4b3887e3a68d7e541
- Size 633KB
- SHA256 8e3e76db72505e785431bc914c3e04296052b3d1840877ca34f8109f50b12e86
- MD5 7378f71a203964b4b3887e3a68d7e541
- SHA1 3f21b944edf02d4395efd92fd77af126cb938999
- SHA512 1dbd92fb4b068cd55239eaf468e2db872b1a80561f8c9155a9acdde4f9e610b9ba7133c89413956d47703fa0a72678f2024ca6454a26b32f6f8c9746fb9fb566
- SSDEEP 12288:3pp4bCnXEKgq9BRoltLBqIWjb+VTJeTiWmpLQLLLLyLLLLLLLOLLLLLLLLVLLLLX:74GnXExq9B2L1dT4TiWm
- TLSH T14CD402D4BED1CC3AC7A251764170BE423EEE6E6941EC46CBD7A81E58DE35448EC1CA0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext