Extracted

• • Target
    d6a9b0467cefd7faf593cfd666edd3a2.exe
  • Size 735KB
  • SHA256 fd5e6989ff1e8e4ef24bbb2b67018ef8adbdf0da5d489cd142fd8e1a033ce92e
  • MD5 d6a9b0467cefd7faf593cfd666edd3a2
  • SHA1 0a7f0528da4ef476c96b6f3d33320add4dbd1eec
  • SHA512 66f06b9fff1519b9fc17eb6ed396aea39c892769c71279144af661f62c4d2fa8d2fc6a708233593b66416e574efefc3c6db917ed505a02dd6a3b232ebece540c
  • MD5 SHA1 SHA512

  Score

  10^/10

  azorultcollectiondiscoveryinfostealerspywarestealersuricatatrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • suricata: ET MALWARE AZORult v3.3 Server Response M2

    suricata: ET MALWARE AZORult v3.3 Server Response M2

    suricata

  • suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M13

    suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M13

    suricata

  • suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M5

    suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M5

    suricata

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2