Extracted

• • Target

    a4f620d0d26f46e65ae098b122c2685d_JaffaCakes118

  • Size

    643KB

  • MD5

    a4f620d0d26f46e65ae098b122c2685d

  • SHA1

    cfb493b44c5e0f022a836aaed6f7bc7a12c4748f

  • SHA256

    1aca6b8c903b106e1d55c6199f0c18be6a2533c53aae29ea8fe97dba06a780bc

  • SHA512

    9898f3b12d017c9453e680a4126d44d861b67b2adf00167677b64aa96ddbe6009b9ade8e5c63cede47250ae11c77d7e2b74ecb305f0e94a216a8d6ab9f2f1731

  • SSDEEP

    12288:pYcCPWE97ZmTL+B39opskIHhziQSRIshIfdxA08OJKpXhSFkNjKRTjeMz:Wc6Wf+BDSRIhi08O8XhPUTjHz

  Score

  10^/10

  azorultinfostealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/System.dll

  • Size

    11KB

  • MD5

    3f176d1ee13b0d7d6bd92e1c7a0b9bae

  • SHA1

    fe582246792774c2c9dd15639ffa0aca90d6fd0b

  • SHA256

    fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e

  • SHA512

    0a69124819b7568d0dea4e9e85ce8fe61c7ba697c934e3a95e2dcfb9f252b1d9da7faf8774b6e8efd614885507acc94987733eba09a2f5e7098b774dfc8524b6

  • SSDEEP

    192:OPtkumJX7zB22kGwfy0mtVgkCPOsX1un:/702k5qpdsXQn

  Score

  3^/10
  behavioral3behavioral4

• • Target

    $PLUGINSDIR/nsDialogs.dll

  • Size

    9KB

  • MD5

    b3070cf20db659fdfb3cb2ed38130e8d

  • SHA1

    aa234b0620bebddde1414ff6b0840d883890b413

  • SHA256

    f2c1409faf2952c1c91f4b5495158ef5c7d1a1db6eea4a18f163574bd52fcad0

  • SHA512

    4849a4cf24ea8a26cd04eb132d479cc093d4e204ed3866a77646d03778f4c128e20722a0c3cd62ea98a37deea4ce505fe632420158c71a10b0c8c5e32b38e3f1

  • SSDEEP

    96:oEqZ4zC5RH3cXX1LlYlRowycxM2DjDf3GEst+Nt+jvDYx40qndYHnxss:oEq+CP3uKrpyREs06YxEdGn

  Score

  3^/10
  behavioral5behavioral6