Extracted

• • Target

    8791a2b797c21d7830ea9ac9a8a5a5bd

  • Size

    1.2MB

  • MD5

    8791a2b797c21d7830ea9ac9a8a5a5bd

  • SHA1

    64fb146114087b4bcc1fa0ca069bd936bfd81d8e

  • SHA256

    20ab52e4380262d3d83ddf0898b715d72d1feca497c566bfb952824cd6c76bc1

  • SHA512

    438e530e8481b530318498157627dd594b84e88e689c7409e76fef84175906d62e2d900492beb1f0c94ad8a2d0a4b9ed47e2b93b8a27d2ef74e555cfd7caba51

  • SSDEEP

    24576:ydOsBgo0q4wM1BmCmTOUd+L6kbXWi3vEA4r6nNd86:y8oHMDmCm6Ud+zbXt3vs6nz8

  Score

  10^/10

  azorultinfostealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2