Extracted

• • Target

    471dcea0354a72ac93b2b80989ce8560_NeikiAnalytics

  • Size

    722KB

  • MD5

    471dcea0354a72ac93b2b80989ce8560

  • SHA1

    8ab39f9b74dddb0202e32e2eb3a7252e86de18b0

  • SHA256

    f304fe09810d864e0dfcc2c42da345a601079a9dc335179729296aaf08a718ab

  • SHA512

    13afd53b5760d98ade6c2dcd2ecf50fe6eef1a906c735d76376402eb038b0990065c3fc90af3731d480671437a18461180ef5779ae5c4dbbca8d1aa8873bd936

  • SSDEEP

    12288:DquErHF6xC9D6DmR1J98w4oknqOKw/zTd1RVaHvymUi6rjXrm62iU952aLovi75C:arl6kD68JmloO7TdNaPymUi63i62xHLm

  Score

  10^/10

  azorultinfostealertrojanupx

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2