Extracted

• • Target
    2586e592e0ab84c8ecbe7c557f379387.exe
  • Size 270KB
  • SHA256 b2000bfff069cd0554a923e50c2188184ec39b724a5a80fa45f33a5571c69bfa
  • MD5 2586e592e0ab84c8ecbe7c557f379387
  • SHA1 36a039c0809cbd008a5ce757ebee4b6a82cc19ad
  • SHA512 8fa907316cd56f8a6ed774de830b8ed2dba64d13bf570017e5556acb3c582760614b235a45b68e4d302a2155edaf9384f548f0080e09f8eaa3325af8657f6afc
  • SSDEEP 3072:976jje13UcVDLque6f0JsuHOVhEDrmuhY3135R3Ua0k8:p6213UcVDLbe6f0Jdoavmuh43Ua
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealc4109976902326622912460160242discoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2