Extracted

• • Target

    424da66262521997e7c0e25473dc47cd.bin

  • Size

    241KB

  • MD5

    424da66262521997e7c0e25473dc47cd

  • SHA1

    a36280281ef8b413094cf210e15cef202e33a8cd

  • SHA256

    02c7045ceba40c4162507a22acffe17050e59af9afc0df57f5bca99c798c14fb

  • SHA512

    208861454a1553ea8d57ad26fa6d34eb99541aa17c135353baac57848baf61be0344dfdb9b5e9fa7801394b11f79ca3658bdfb708ed09fa976787fae161a722e

  • SSDEEP

    6144:nqTwsCf61IKYjsDO1GYldohrSrN1p2FOC+7D3B:nNh61JMs6Y42rSvpb

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2