Extracted

Extracted

Extracted

• • Target

    020824e5aa9ecb744b1b94bd855a8f3a

  • Size

    1.2MB

  • MD5

    020824e5aa9ecb744b1b94bd855a8f3a

  • SHA1

    d6082fcfcfa6e7f1d719c2c02a3e761e46d48004

  • SHA256

    d0b7a458e09fd14ae8476200bd5acf2fc93ea0e2fea357079a88df80e720c23d

  • SHA512

    d30c70279155b33f0c46e11ca4c591f00caf1574a0a02a7875226f0fea0b09327685ab2b6a52fa216d01032c362b2f119bea8aa4cbae0717e687a43eacbe8a33

  • SSDEEP

    24576:o8oQcipzX0UCT88jNiyBHBhwCU2RUclLlsHD6tn4883JJRYI+fS3La:o8oQcipzX0UL8xHrhlUEUclLCD6tn4d9

  Score

  10^/10

  azorultraccoonzgratc81fb6015c832710f869f6911e1aec18747e0184infostealerratstealertrojanoskispyware

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Detect ZGRat V1

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Raccoon Stealer V1 payload

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2