Extracted

• • Target

    Data Sheet.exe

  • Size

    623KB

  • MD5

    c547dc9b16fab08be2031db5d1d4b115

  • SHA1

    8dd7522d227d1a7e65dbdff56ec3b0ec622645fe

  • SHA256

    1132a1b1791adcf0f75bbde81828976f2cf222ed605abf3d363f9fa90ee208bd

  • SHA512

    71648b7ec372a364262b26c8d1532eadccbf7d00ac2fe58ce303a59d401e762222d529ddb923311537356c3212c393159b6cfe57bf81930864e2cfaf30060c74

  Score

  10^/10

  trojaninfostealerazorultspywarediscovery

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Checks for installed software on the system

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2