Extracted

• • Target
    256057e4f992644fc9c1afe381f11ac1.exe
  • Size 714KB
  • SHA256 f540fb6b1e7f9612aa1ca6347c6de7a54ab883bcd23463a5011d0cbc57383974
  • MD5 256057e4f992644fc9c1afe381f11ac1
  • SHA1 1d31b5e458ab0fca9f494104671406082dc893f8
  • SHA512 94e264f2c159908d60ad57b7464e22b52d518b73a419f9bb940634862978cd058e244ecc0539e12dd10d94485d34d8340b7f26be5861179e5bc2d261fd430003
  • MD5 SHA1 SHA512

  Score

  10^/10

  spywarediscoverytrojaninfostealerazorult

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Checks for installed software on the system

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2