Extracted

• • Target
    92018_829_pdf.vbs
  • Size 2KB
  • SHA256 42a9948279e99a563fda0917c2005b3364f1d31cc0e142ef1860d93e5437792f
  • MD5 1889bd46459f925581c17625af785f68
  • SHA1 a3912ea5c1d2e7463a2b4b0c1c1f249b84139e79
  • SHA512 f92cb72acecc13348e95b05a131210c254ad8b5cfd61423d273777ed96d1fc4671f1e161e1913c351d41c7ffe777a087eb7b2dfac4df1bb255aa11cdfe4da76e
  • MD5 SHA1 SHA512

  Score

  10^/10

  azorultcollectioninfostealerspywarestealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2