Extracted

• • Target

    1c355ce816f4020a650a0db53b2d8d57_JaffaCakes118

  • Size

    1.0MB

  • MD5

    1c355ce816f4020a650a0db53b2d8d57

  • SHA1

    2bbfdc36ef5c7373c33fa8f2a678a40da1de15b9

  • SHA256

    ce9a7a5c2deb38b38c48a680f2f4ef3cc2f0e9a45248b79bb8a7065578662d79

  • SHA512

    f182e7dc74ad314efacb3c8a216a10ffa9dee1c1bc15cdfbb535af773db1b1ec5ea1c6bd388fce5cd6e79b463b6408411576cf47c78fe7164b33959adcb28ba0

  • SSDEEP

    24576:aAHnh+eWsN3skA4RV1Hom2KXMmHaH1cbUM3O10j5:th+ZkldoPK8YaH1cQj0

  Score

  10^/10

  azorultinfostealertrojanupx

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2