Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6c51eb7399c58790a092b0263fc94de25fd977f238c0f51fa0f10e45aef14d7a.exe
-
Size
716KB
-
Sample
200710-y9b9fn991n
-
MD5
d463bd537bc6fcf9533d5c7cdec153b0
-
SHA1
0ee47bcacf1cebf58f8611326fe070cf0adc5d51
-
SHA256
6c51eb7399c58790a092b0263fc94de25fd977f238c0f51fa0f10e45aef14d7a
-
SHA512
bd20f5cee5c8f3e06a8ce26ab8092360bb62a7174e141ff6198a702d5f088e28be21c02e07b90d7c3997c4704f31568c36096c1413eb7c8fefe6bb9b9f743e3f
Static task
static1
Behavioral task
behavioral1
Sample
6c51eb7399c58790a092b0263fc94de25fd977f238c0f51fa0f10e45aef14d7a.exe
Resource
win7
Behavioral task
behavioral2
Sample
6c51eb7399c58790a092b0263fc94de25fd977f238c0f51fa0f10e45aef14d7a.exe
Resource
win10v200430
Malware Config
Extracted
azorult
http://165.22.238.167/index.php
Targets
-
-
Target
6c51eb7399c58790a092b0263fc94de25fd977f238c0f51fa0f10e45aef14d7a.exe
-
Size
716KB
-
MD5
d463bd537bc6fcf9533d5c7cdec153b0
-
SHA1
0ee47bcacf1cebf58f8611326fe070cf0adc5d51
-
SHA256
6c51eb7399c58790a092b0263fc94de25fd977f238c0f51fa0f10e45aef14d7a
-
SHA512
bd20f5cee5c8f3e06a8ce26ab8092360bb62a7174e141ff6198a702d5f088e28be21c02e07b90d7c3997c4704f31568c36096c1413eb7c8fefe6bb9b9f743e3f
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Loads dropped DLL
-
Reads data files stored by FTP clients
Tries to access configuration files associated with programs like FileZilla.
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks for installed software on the system
-
Suspicious use of SetThreadContext
-