Extracted

• • Target
    PRODUCT INQUIRY 2022.exe
  • Size 1.7MB
  • SHA256 55d6cf850bc8e1f91d1d5b0905eed004df00da757e7ffc80fead608ff18f1e69
  • MD5 10fa511e7a230d443c6bbc008ebdf1c7
  • SHA1 976e29b1b050a70448ea23976deb8b7f24594e36
  • SHA512 4a2a854bcdcab4ef0fef9cf33814d9dd08f72444079ae29b3228f631e7520ac2a570b1da20c5f76ab2cc4ad88b8073f98a12e27820a3d2f0d559d3606ba5c395
  • MD5 SHA1 SHA512

  Score

  10^/10

  azorultinfostealerpersistencesuricatatrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M13

    suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M13

    suricata

  • suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M5

    suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M5

    suricata

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2