Extracted

• • Target

    e5a815ee2d9857e6b8477c44baef139dd1b0457fd0d7b1293c357eddc3d90c81.exe

  • Size

    693KB

  • MD5

    161e0b9b80e449fd4b0497cde4167c42

  • SHA1

    78a9a6b69af7e273c4c436d80596a7fcc075f3ef

  • SHA256

    e5a815ee2d9857e6b8477c44baef139dd1b0457fd0d7b1293c357eddc3d90c81

  • SHA512

    0cc7848d199478cbf85031f8d80e5ab680fcf99e1c002eaff96fcb6b0d6330d941d8937a7d8b5ce0f20e250a07f6cd41c1bb9f939c583b9fdce8fe6d9f2b6ead

  Score

  10^/10

  discoverytrojaninfostealerazorultspyware

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Checks for installed software on the system

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2