Extracted

Extracted

• • Target
    hi.exe
  • Size 4.6MB
  • SHA256 7adea1ca9f22b564f333d23b870bd883e8adfeddd0e08f4366a9f0b20128b168
  • MD5 7a1683b30d4b3d121492fd7eb032144c
  • SHA1 599ecc2564b585a5adf804693f691a03e191421d
  • SHA512 3b9e17b9ed2d08131f2df76cd73b0dae9559a98a94219b2aee58f15ca821708bfd2a3fd7d55711e676d2a820e85da7e9365d62033ee62ec9cbc0623344644ce0
  • SSDEEP 98304:MvOaDywmOCivCHIdN2sGsnmJ0dnX5auNWhHcUDqSZliBH291P:DKyZYCSusnrnJVNN6ZOE9F
  • TLSH
    T10E262329E7E612F8D1B79578CD838812F7B57C8D4771E68F53A025660E232D09E3EB12
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectioncredential_accessdiscoveryexecutionazorultponyxmriginfostealerminerpersistenceratspywarestealertrojan

  • Family: Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Family: Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Family: xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig

  • XMRig Miner payload

    miner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2