Extracted

• • Target

    822b8bb11b25a0fe110ce1542e25eb2a1f15d24d5a06a40a6ee9bbb6b6b2bcef

  • Size

    266KB

  • MD5

    6a23e3d10d925c99c59da1b26578ed3b

  • SHA1

    c1e9bdb26a13bc3a722624e4acd2d7aa506a5a8b

  • SHA256

    822b8bb11b25a0fe110ce1542e25eb2a1f15d24d5a06a40a6ee9bbb6b6b2bcef

  • SHA512

    ae871cf52754c90406322f4d5e5cc71ffe3f95c13494b55f434ef71d67a08fbfa46c0b848bb50981a8546608bbf96093e41012656036e9f7e6f2506473832f52

  • SSDEEP

    3072:71ZUwifsSdAmzkbLYlep5HCPBjxsFek1qht9Y0Mvo5X7K9j5SSdeCU3wsEtRd:T7i+IkbLIeDHS6Ek8ht9YFvU1Sd

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Detects Stealc stealer

    stealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1