Extracted

• • Target

    e1113c230ade2699ce72b97a2d59e31b10df3885ffb9e5f6c3a12d6c8b3c78e6

  • Size

    232KB

  • MD5

    4202eb391fb7f049a55945fdf0852bb9

  • SHA1

    e330ca2d7e39d80052a241d96020b9c38b70b99b

  • SHA256

    e1113c230ade2699ce72b97a2d59e31b10df3885ffb9e5f6c3a12d6c8b3c78e6

  • SHA512

    bb17b408b0de69a35178c94ee4a785c4a28dab1fc22bd61e7a2ad464f5cf8fb55f6aa5cfee7605826c2f56f49d2472df166f141629c9eed21290ac8536f7c3c3

  • SSDEEP

    3072:ZvGxmPoJHxp08fHNMd/jj+pDOxNJe0t5Nn/F781GzuC0Sd7IbCAkX7HcgjnlzFp:Bg9/0KHl4NJewb/F+4v0ygCAkrHcuf

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Detects Stealc stealer

    stealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1