Extracted

• • Target
    84572342b63722bec9aa780e7290dd05.exe
  • Size 7.0MB
  • SHA256 71b1e17a2aa5eb3f0c6b51671ad2a1bc705042152c4ab74db3e15d4e5a68d0d8
  • MD5 84572342b63722bec9aa780e7290dd05
  • SHA1 7061726ee31a9091f38a774da4b9b021cf2a74d4
  • SHA512 265ca5cb61f1f44d19f1134a9249e4218009e037f7687c93a8df5935edb10cc64fd2cb49340f3f60b9c376d4ae41097a18e2ba9cb4a5c4f8a8ea80e779307cce
  • SSDEEP 49152:XjCfFT6Yq7V5kgaPBGbJsV8n25lu8QPArZbwTtjvuQ2G6daRW5zVo208gdbsY:XWf5bkabjJ108c
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  azorultdiscoveryinfostealerspywarestealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2