General
- Target jaffacakes118_Trojan-Spy.Win32.Stealer.dwi.db4b83a15b287032722d5efdd701178d
- Size 314KB
- Sample261018-21lvjsbw8v
- SHA256 179777af0937d35ebdbd4e2469d1012179ff29e631229f6fb5b0e2a303fdaf26
- MD5 db4b83a15b287032722d5efdd701178d
- SHA1 ceb7ed470133ec57575ba4fe9ecc3d839a7c98bc
- SHA512 9d93af6d5da4b216474a14393f64824cd87839405575dc07759338f27163eac115e5d617cff044e1249ae38b5f1d8fa16f4a1e0e230bc67f7c68aefc9f89383e
- SSDEEP 3072:OmaTqfk05lOJiqHYjU/I5ByG11ZtDh4CYWM94RLjvXs9DGtrbd6853MB9UOdE78s:zaTqfl5lQQxTRGe84NwAtrnms8uY0
- TLSH T171649D0032C1DC32D11291758659C7B3DF6B78756865EE8BBEC4BAB90F34A92EF24319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Spy.Win32.Stealer.dwi.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Spy.Win32.Stealer.dwi.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://185.162.10.212/p/index.php
Targets
-
- Target jaffacakes118_Trojan-Spy.Win32.Stealer.dwi.db4b83a15b287032722d5efdd701178d
- Size 314KB
- SHA256 179777af0937d35ebdbd4e2469d1012179ff29e631229f6fb5b0e2a303fdaf26
- MD5 db4b83a15b287032722d5efdd701178d
- SHA1 ceb7ed470133ec57575ba4fe9ecc3d839a7c98bc
- SHA512 9d93af6d5da4b216474a14393f64824cd87839405575dc07759338f27163eac115e5d617cff044e1249ae38b5f1d8fa16f4a1e0e230bc67f7c68aefc9f89383e
- SSDEEP 3072:OmaTqfk05lOJiqHYjU/I5ByG11ZtDh4CYWM94RLjvXs9DGtrbd6853MB9UOdE78s:zaTqfl5lQQxTRGe84NwAtrnms8uY0
- TLSH T171649D0032C1DC32D11291758659C7B3DF6B78756865EE8BBEC4BAB90F34A92EF24319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.