General
- Target jaffacakes118_Trojan-Spy.Win32.Stealer.gt.4ff958c1b2c09cce1cc258771b95b72c
- Size 3.5MB
- Sample261018-215yesty2k
- SHA256 2b3fb66a3b23dfbe40510fb7d11cb21d40e26f49497c74d8d7002b5b5fc49114
- MD5 4ff958c1b2c09cce1cc258771b95b72c
- SHA1 865cd821ce5999f6fbaad593f0289a8131511f26
- SHA512 e5f4f184ed815f3b8888bcebc26c333d019cfca8b865f4624082eaae561878a412c0f1d88edafe332a9242ff6adafb93d1547dc61eab00d000c16025811b539e
- SSDEEP 98304:HbgXuFwRcDP+is/ZIh/xjbN5Wwpvc8KDwrpjEfU+rR5PG:HEo9uGh/xj7U/MEBVG
- TLSH T1DA0633DB44109748FDB0247643E2997752E979CE098E9DEB77C286EEC20AB5333C819D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Spy.Win32.Stealer.gt.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Spy.Win32.Stealer.gt.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://163.172.26.80/index.php
Targets
-
- Target jaffacakes118_Trojan-Spy.Win32.Stealer.gt.4ff958c1b2c09cce1cc258771b95b72c
- Size 3.5MB
- SHA256 2b3fb66a3b23dfbe40510fb7d11cb21d40e26f49497c74d8d7002b5b5fc49114
- MD5 4ff958c1b2c09cce1cc258771b95b72c
- SHA1 865cd821ce5999f6fbaad593f0289a8131511f26
- SHA512 e5f4f184ed815f3b8888bcebc26c333d019cfca8b865f4624082eaae561878a412c0f1d88edafe332a9242ff6adafb93d1547dc61eab00d000c16025811b539e
- SSDEEP 98304:HbgXuFwRcDP+is/ZIh/xjbN5Wwpvc8KDwrpjEfU+rR5PG:HEo9uGh/xj7U/MEBVG
- TLSH T1DA0633DB44109748FDB0247643E2997752E979CE098E9DEB77C286EEC20AB5333C819D
- MD5 SHA1 SHA512 SSDEEP TLSH
Family: Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
Loads dropped DLL