Extracted

• • Target

    af44fccdfe3d6e7f65283d47f4a121bd70000dbcf1d8d91aead1c124cd808554.exe

  • Size

    1.2MB

  • MD5

    bde0b7ff5003da14df7675564d5a8f6a

  • SHA1

    e72691a96a386c72392375969f0426361e167d3b

  • SHA256

    af44fccdfe3d6e7f65283d47f4a121bd70000dbcf1d8d91aead1c124cd808554

  • SHA512

    f1bdee98318083a64e6ad820e630cd9a39d6017eff13c7d5be86c66bab5f388111a48fbb1ffe2198ab6e915d4d1431ba06373404885cbde5ba186dfb78ac74cf

  • SSDEEP

    24576:LqDEvCTbMWu7rQYlBQcBiT6rprG8a8cqly1Cs6wf:LTvC/MTQYxsWR7a8cqls

  Score

  10^/10

  azorultcollectioncredential_accessdiscoveryinfostealerspywarestealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2