General
- Target SN890156.exe
- Size 583KB
- Sample240911-tt757s1bpc
- SHA256 74d52b94dbe44e83459e097ea1a1d22631a78bffa24ccf8ecc5492e9af9091a2
Score
10/10
Malware Config
Targets
-
- Target SN890156.exe
- Size 583KB
- SHA256 74d52b94dbe44e83459e097ea1a1d22631a78bffa24ccf8ecc5492e9af9091a2
Score10/10Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
Loads dropped DLL
Reads local data of messenger clients
Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
Accesses Microsoft Outlook profiles
Accesses cryptocurrency files/wallets, possible credential harvesting
Suspicious use of NtCreateThreadExHideFromDebugger
Suspicious use of NtSetInformationThreadHideFromDebugger
Suspicious use of SetThreadContext