Extracted

• • Target

    a3eb085e4d161a609f5c035930564a74_JaffaCakes118

  • Size

    246KB

  • MD5

    a3eb085e4d161a609f5c035930564a74

  • SHA1

    07d92e7b9b0ad8876e6d76ebf4605303af83148e

  • SHA256

    896c7582c90c506fb0c3fc69ed4e81266a47129f79682d89f76a5583c0113efa

  • SHA512

    2b41587b2861c5aea71944b10e85d48188fe0c87c9d08422afbf3c54fd71b59fa7915fb927066881611230b5a9fcd4f5984c1f06016afe6c598e058931a5798e

  • SSDEEP

    6144:X1onigKGh8Y5oFVV0KgJUz0Y+Ol3Wh1s5/ifLWAIDeG:loicxmETOgs5/ifKDR

  Score

  10^/10

  azorultinfostealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/InstallOptions.dll

  • Size

    14KB

  • MD5

    3e277798b9d8f48806fbb5ebfd4990db

  • SHA1

    d1ab343c5792bc99599ec7acba506e8ba7e05969

  • SHA256

    fe19353288a08a5d2640a9c022424a1d20e4909a351f2114423e087313a40d7c

  • SHA512

    84c9d4e2e6872277bffb0e10b292c8c384d475ad163fd0a47ca924a3c79077dfde880f535a171660f73265792554129161d079a10057d44e28e2d57ebc477e92

  • SSDEEP

    192:d4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrjsK72dwF7dBOne:Wn3T5KdHCMRD/R1cOnrjs+BO

  Score

  3^/10
  behavioral3behavioral4

• • Target

    $PLUGINSDIR/LangDLL.dll

  • Size

    5KB

  • MD5

    b26b412d9f1050ad53f663c972fdcd9f

  • SHA1

    7bc4ed444f3f8fd14c2c36784d828175bace8c17

  • SHA256

    70c842f318f691d92e5829616a283aa9bf9dc18cea6f39bad028e176056b591a

  • SHA512

    ba350a10b41c0cfe34c502e3d0e68fbfe1489448c85a282e0a5e444fa58d0dd8be2e566e21f0734a0debfc454f08b84140964c09c4c952f6a442642c911d7b46

  • SSDEEP

    48:im14sjq8W2MPUptuMMFvx/om/ycNSCwVGfOY0vB6/JvR0Jpof5d2D:F1EBl91Z7/ycNSCwV8TLZR0Wd2

  Score

  3^/10
  behavioral5behavioral6

• • Target

    $PLUGINSDIR/StartMenu.dll

  • Size

    7KB

  • MD5

    12281b59f907027f4d374b8423e2b0f9

  • SHA1

    21216630633bb6cc4aa9b1c5873f345bbe06b74c

  • SHA256

    1cc68f4aef76d70d7326853f0e604ff3ac926c1dfe7aee7ad69a3259280a4e66

  • SHA512

    7c8c7a5c7f8e6d7a0b5d54ad1bfc34831358487985bd64459cd22f45f82385f4740e7a62048b01759b79e3d0f05ccb8152d63c3d864f308146ce5c746a9296b6

  • SSDEEP

    96:qgiqVPb3X8K8Kdr3gEq6nNdMk6Qiw290+q6LDtJ1tR3hhEl7y:qgiqVPgK8K9eIdE9B/tVhg7

  Score

  3^/10
  behavioral7behavioral8

• • Target

    $PLUGINSDIR/System.dll

  • Size

    11KB

  • MD5

    3f176d1ee13b0d7d6bd92e1c7a0b9bae

  • SHA1

    fe582246792774c2c9dd15639ffa0aca90d6fd0b

  • SHA256

    fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e

  • SHA512

    0a69124819b7568d0dea4e9e85ce8fe61c7ba697c934e3a95e2dcfb9f252b1d9da7faf8774b6e8efd614885507acc94987733eba09a2f5e7098b774dfc8524b6

  • SSDEEP

    192:OPtkumJX7zB22kGwfy0mtVgkCPOsX1un:/702k5qpdsXQn

  Score

  3^/10
  behavioral10behavioral9

• • Target

    $PLUGINSDIR/nsDialogs.dll

  • Size

    9KB

  • MD5

    b3070cf20db659fdfb3cb2ed38130e8d

  • SHA1

    aa234b0620bebddde1414ff6b0840d883890b413

  • SHA256

    f2c1409faf2952c1c91f4b5495158ef5c7d1a1db6eea4a18f163574bd52fcad0

  • SHA512

    4849a4cf24ea8a26cd04eb132d479cc093d4e204ed3866a77646d03778f4c128e20722a0c3cd62ea98a37deea4ce505fe632420158c71a10b0c8c5e32b38e3f1

  • SSDEEP

    96:oEqZ4zC5RH3cXX1LlYlRowycxM2DjDf3GEst+Nt+jvDYx40qndYHnxss:oEq+CP3uKrpyREs06YxEdGn

  Score

  3^/10
  behavioral11behavioral12