Extracted

• • Target

    76918f971902e148a549c13ba50a96fb.exe

  • Size

    225KB

  • MD5

    76918f971902e148a549c13ba50a96fb

  • SHA1

    431f6d87cd84c6fdcc2e389c1f5dd7b9d1f677d3

  • SHA256

    86d7dbb438477b8334304d10d719d750bf379a10e2fc02a5e29632e2ed3a101c

  • SHA512

    68d82d4360a99ba211e4edc4cfbb69ae1a0ddb6aa7bc9c94bd712cd07b2f89b25204a74f664b62bf8430edd11f25c0c6e8e52cc724412b58457819dc1c0b3231

  • SSDEEP

    3072:/pkFzFqvmq+Wz33lTVbs3AilpQlVE1TmI5PPLWWsjMSgrEA7yUbQ23s0:/AAvmnU33GWVE1TljwjfgrEsyUbQ

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Detects Stealc stealer

    stealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2