General
- Target MGL6070111-PDF.exe
- Size 849KB
- Sample240725-hwhsjsvdpl
- SHA256 65645a7b022d73d26cf94f50e0c9eaa224911bf8443b0366bcc671be27dbb9bc
Score
10/10
Malware Config
Targets
-
- Target MGL6070111-PDF.exe
- Size 849KB
- SHA256 65645a7b022d73d26cf94f50e0c9eaa224911bf8443b0366bcc671be27dbb9bc
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Loads dropped DLL
-
Reads local data of messenger clients
Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses Microsoft Outlook profiles
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Drops file in System32 directory
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext