General
- Target jaffacakes118_Trojan-Spy.Win32.Stealer.fiw.ed413beded3c44cf060ede05bb458d41
- Size 564KB
- Sample261018-21vsfstx9q
- SHA256 917b87078163dc9bff21e4960fdfa7034f13ca18914cf3f2968159fd1f978a13
- MD5 ed413beded3c44cf060ede05bb458d41
- SHA1 bb89945b436ecf7d3d86e0de7320958331eda21e
- SHA512 667a8f85b3322a60fa0276837373ebaaee3ed63cdb4db3f5cbac46020f7837e84b116dee91a9e10258a190f7b2d1bba3522549765e6ebaf5b4ad7d9cac7294e8
- SSDEEP 12288:tt5JPmTRAG4TOTKfBh1phY5PLAW1eUuZsEp+:3OCG4TCopC5DAbU
- TLSH T161C47B18E357C138C02241324E5ED2B24C35FD7469A1496BF3D4BE3B9EF1AB6A636706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Spy.Win32.Stealer.fiw.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Spy.Win32.Stealer.fiw.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://194.165.16.40/GG/index.php
Targets
-
- Target jaffacakes118_Trojan-Spy.Win32.Stealer.fiw.ed413beded3c44cf060ede05bb458d41
- Size 564KB
- SHA256 917b87078163dc9bff21e4960fdfa7034f13ca18914cf3f2968159fd1f978a13
- MD5 ed413beded3c44cf060ede05bb458d41
- SHA1 bb89945b436ecf7d3d86e0de7320958331eda21e
- SHA512 667a8f85b3322a60fa0276837373ebaaee3ed63cdb4db3f5cbac46020f7837e84b116dee91a9e10258a190f7b2d1bba3522549765e6ebaf5b4ad7d9cac7294e8
- SSDEEP 12288:tt5JPmTRAG4TOTKfBh1phY5PLAW1eUuZsEp+:3OCG4TCopC5DAbU
- TLSH T161C47B18E357C138C02241324E5ED2B24C35FD7469A1496BF3D4BE3B9EF1AB6A636706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.