Extracted

Extracted

• • Target
    SecuriteInfo.com.Trojan.Siggen10.9265.1810.16829
  • Size 423KB
  • SHA256 2ece9ea188efe1c9818ed0dd874ddcc1f88466baefb8bf369917be577ca006d6
  • MD5 4bde55d8cea6c4d5305a7894f5273460
  • SHA1 25668e7efc18c38bafd0eb59689c7144e5fdefa3
  • SHA512 cdc7b9839d8f3ddd610f886c5d75a4a5d5420995a3a0baf2be8e992eb7de27b2f0614e8cdd7f033d26000064cb36352b8ffddefbb28ef575d26c4ab33879f70d
  • MD5 SHA1 SHA512

  Score

  10^/10

  azorultoskidiscoveryinfostealerspywarestealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2