General
- Target jaffacakes118_Trojan-Spy.MSIL.Quasar.dqu.adf72c161c50a5c186328cb37c025430
- Size 733KB
- Sample261019-bpbbkadf37
- SHA256 099954f6ce21fa090277cc9c6d6e56438b2e0b0699175e417df5e9568dbceffb
- MD5 adf72c161c50a5c186328cb37c025430
- SHA1 6598847a08022a9476ae20af153b6c10ce771819
- SHA512 1d77baea3c1f4b1adb52b3b6468d3a445d2c350210076faff851e85751608c1833916e67875207842b17e6cb7d4563a50823299b42fd1ba68fc5ea1818d16e2a
- SSDEEP 12288:OHki6YD4NNolbH6L/ofEJ3Ckj/0VdB4Pe0QejSHVhBD52rYkH/pdie/6:6khNNIejPXrMvHhB9dspkJ
- TLSH T1B0F4AE16531BCBE1EBE4D670ED3E6B307A9CBC8500A0986F1B74B395EA7674006C7A94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Spy.MSIL.Quasar.dqu.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Spy.MSIL.Quasar.dqu.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://commandostr.com/z0r3q1.php
Targets
-
- Target jaffacakes118_Trojan-Spy.MSIL.Quasar.dqu.adf72c161c50a5c186328cb37c025430
- Size 733KB
- SHA256 099954f6ce21fa090277cc9c6d6e56438b2e0b0699175e417df5e9568dbceffb
- MD5 adf72c161c50a5c186328cb37c025430
- SHA1 6598847a08022a9476ae20af153b6c10ce771819
- SHA512 1d77baea3c1f4b1adb52b3b6468d3a445d2c350210076faff851e85751608c1833916e67875207842b17e6cb7d4563a50823299b42fd1ba68fc5ea1818d16e2a
- SSDEEP 12288:OHki6YD4NNolbH6L/ofEJ3Ckj/0VdB4Pe0QejSHVhBD52rYkH/pdie/6:6khNNIejPXrMvHhB9dspkJ
- TLSH T1B0F4AE16531BCBE1EBE4D670ED3E6B307A9CBC8500A0986F1B74B395EA7674006C7A94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.