Extracted

• • Target

    4c328d4cebe407bca126c177dc18bc34_JaffaCakes118

  • Size

    3.4MB

  • MD5

    4c328d4cebe407bca126c177dc18bc34

  • SHA1

    78b79bda159a5b9b88f9b53a3493635857144f98

  • SHA256

    31de3bb41297569433434ed6cb90a133e22655f30322caf78948310b713f1be7

  • SHA512

    bfe741601bc1e3b0c2f0fc69183bb8332071b422a74bb26f2cfe4752716e41f8d1bd0229b9b320af10786a65533a39c374e5c52d42fc5654e67a55edcf17562a

  • SSDEEP

    98304:1AI+2TAf+MzQSioq96WMb3O6pLve2WX69t6S9I9VU:mtQMZq9666pLvejX06SOHU

  Score

  10^/10

  azorultdiscoveryinfostealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2