Extracted

• • Target

    902677ddb08320143b6e5785d56b9f320bea50e4ae5d8034fc55a5598919c55a

  • Size

    3.4MB

  • MD5

    3ce482af872d6e360754613612557eaf

  • SHA1

    7f198bcabaaada715f060ded17beb83077289fc3

  • SHA256

    902677ddb08320143b6e5785d56b9f320bea50e4ae5d8034fc55a5598919c55a

  • SHA512

    54448c4e4da5ac2a398af5b38550bed3a83e11cffc628bf373659294976927fe57146e18a670c9e3b114e42bbd3b28d58a1dd298306617088964e9ddb9984ec7

  Score

  10^/10

  azorultdiscoveryinfostealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2