Extracted

• • Target

    528D3EF48415F22BD277A9759D83A859.exe

  • Size

    1.3MB

  • MD5

    528d3ef48415f22bd277a9759d83a859

  • SHA1

    4ee7ed36eeaceca51e91952d25136f7260be6eab

  • SHA256

    7c5bd51d549520223a57177f6dde2feea2a8e48077a36d73b1c96701360a68a6

  • SHA512

    1409d17a7d5928e66b930401e04263a81a33623de404687c22824a177b879a6a4079d7256cd7e72433575662f62fea38a2fc9bad60d74ab88e5bf728fee6bd78

  • SSDEEP

    24576:GqDEvCTbMWu7rQYlBQcBiT6rprG8a4YuX0JS44JZjwDPy6q6:GTvC/MTQYxsWR7andJSlZ2Py7

  Score

  10^/10

  azorultdiscoveryinfostealertrojancollectioncredential_accessspywarestealer

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2