General
- Target jaffacakes118_Trojan-Spy.Win32.Stealer.jdb.4a957cf20d836640acbd57d33f1d440c
- Size 500KB
- Sample261018-22tlsaty2p
- SHA256 9bec85b9a228cc5d34dcc962a9ea1fe22d6932546c7a03a1eb6fbfd646fb6efb
- MD5 4a957cf20d836640acbd57d33f1d440c
- SHA1 fb4465e2cb8c677361f9addc3a9d31622e847957
- SHA512 c18800611dfd6ff363d51890dfa05b03a1f95be8b124fe6cb3bd0327e7b4aaf879864cecda4c94f3cc2ea566536eb954734298e383ca723005d5ce9bbd4745cc
- SSDEEP 12288:7Vh/FJJGkqOmcvN4aiR2TGMxh8ueZYQGGTOT+TF4cGSmTaOK/qDVzGng72+7unsA:7Vh9Jf6Pb+ry
- TLSH T1FDB4BEC7AB3F73A1D7DA6CFE4399A6AA2330EF80562330169CE5395C07B064B5D5C098
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Spy.Win32.Stealer.jdb.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Spy.Win32.Stealer.jdb.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://103.70.137.154/index.php
Targets
-
- Target jaffacakes118_Trojan-Spy.Win32.Stealer.jdb.4a957cf20d836640acbd57d33f1d440c
- Size 500KB
- SHA256 9bec85b9a228cc5d34dcc962a9ea1fe22d6932546c7a03a1eb6fbfd646fb6efb
- MD5 4a957cf20d836640acbd57d33f1d440c
- SHA1 fb4465e2cb8c677361f9addc3a9d31622e847957
- SHA512 c18800611dfd6ff363d51890dfa05b03a1f95be8b124fe6cb3bd0327e7b4aaf879864cecda4c94f3cc2ea566536eb954734298e383ca723005d5ce9bbd4745cc
- SSDEEP 12288:7Vh/FJJGkqOmcvN4aiR2TGMxh8ueZYQGGTOT+TF4cGSmTaOK/qDVzGng72+7unsA:7Vh9Jf6Pb+ry
- TLSH T1FDB4BEC7AB3F73A1D7DA6CFE4399A6AA2330EF80562330169CE5395C07B064B5D5C098
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
Suspicious use of SetThreadContext