Extracted

• • Target

    10b76fe30ee0b337b81df5c2a2d5b836_JaffaCakes118

  • Size

    2.5MB

  • MD5

    10b76fe30ee0b337b81df5c2a2d5b836

  • SHA1

    42da78e2e631d55a811521bab0c9bf0da1a8fbdd

  • SHA256

    f017c8f9742f94889fdf61b8a5f273ec5c848ed3311671ce88728c945c91cca2

  • SHA512

    0800a9dd6c6779f46dc0dd4d13299b2d9efaa5d00d10c9d6d51aadf869c3f30f3f80827c826fbe2b485960a2cdab1ca1491f4be816fb9ab055cbb6ad163fec0e

  • SSDEEP

    49152:pAI+a6LqjZeoEXqET7jsU3WRtq3vsQs+MJU16n/ux1/kxTr4:pAI+a62u/T7jTWRDv+MJy6nU1/kx4

  Score

  10^/10

  azorultdiscoveryinfostealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2