Extracted

• • Target

    f75b569b54638ca8285237ca714e853e3d2ae9e390c4c9516caa04e9fcd30509

  • Size

    607KB

  • MD5

    b115061acd459a7cbfc6b12f85b16083

  • SHA1

    6538ecd3b289457b6e61bcccba35a3bec4f04a17

  • SHA256

    f75b569b54638ca8285237ca714e853e3d2ae9e390c4c9516caa04e9fcd30509

  • SHA512

    da1cbfc4f207616463fdc05ef9a860146cd2c983d42583d885252c080eb3c7b5cb5b64b101a29fc2c5d7a430e21aaadbda68fdd531ef70e2490e4a63fd55e0a2

  Score

  10^/10

  azorultagilenetinfostealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Obfuscated with Agile.Net obfuscator

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2