Extracted

• • Target
    Transação 02836292.PDF.exe
  • Size 801KB
  • SHA256 82a70ddc4cfbdda1bc73daeba06d0812701ee2502812f8aa648cc0b55ac377c8
  • MD5 fb818a753f7509b77833f9241da91c7a
  • SHA1 9e44beec5479cfd087baca7717a54338de5f8ce4
  • SHA512 ca636d2cc7ed4f2c8191f96efec467ee485de1a796f78107c8cdef5ed25a4c2e7809577b605baccfa0478b6401f84f2518318fd7ca5824189e9b12d766410860
  • MD5 SHA1 SHA512

  Score

  10^/10

  trojaninfostealerazorultspyware

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Executes dropped EXE

  • Drops startup file

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • JavaScript code in executable

  • Suspicious use of SetThreadContext

  behavioral1behavioral2