General
- Target jaffacakes118_Trojan-Spy.Win32.Stealer.hjy.bded07b34b8be66a56205ef776f8501d
- Size 396KB
- Sample261018-22dkkawwcs
- SHA256 bccab7af4f540d3b955d42c5358edcec297225adad09757fb3a7523097a241c4
- MD5 bded07b34b8be66a56205ef776f8501d
- SHA1 bccf363132204522bdfb0c28c7645f4cfddd98d9
- SHA512 e49dca2901e7077bea83be98fb973878682bce052888caedbe0f9f5c8ee5812611e09f1b05125bb2750d13d815255baab3b50966b1fc3bede3da5e4a5d43225d
- SSDEEP 6144:AgRjyYG+x10GJitWEmhIlC92lgk8IZXeOTDlAkeVSwpWTZeo:nY41HiEWlCkl8I1DlKYAWleo
- TLSH T12484E1062968D1A1DE055FB16E3081BA13EB7A7546C4ED576B844FEF0EB4D488B3238F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Spy.Win32.Stealer.hjy.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Spy.Win32.Stealer.hjy.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://46.183.222.18/index.php
Targets
-
- Target jaffacakes118_Trojan-Spy.Win32.Stealer.hjy.bded07b34b8be66a56205ef776f8501d
- Size 396KB
- SHA256 bccab7af4f540d3b955d42c5358edcec297225adad09757fb3a7523097a241c4
- MD5 bded07b34b8be66a56205ef776f8501d
- SHA1 bccf363132204522bdfb0c28c7645f4cfddd98d9
- SHA512 e49dca2901e7077bea83be98fb973878682bce052888caedbe0f9f5c8ee5812611e09f1b05125bb2750d13d815255baab3b50966b1fc3bede3da5e4a5d43225d
- SSDEEP 6144:AgRjyYG+x10GJitWEmhIlC92lgk8IZXeOTDlAkeVSwpWTZeo:nY41HiEWlCkl8I1DlKYAWleo
- TLSH T12484E1062968D1A1DE055FB16E3081BA13EB7A7546C4ED576B844FEF0EB4D488B3238F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.