Extracted

• • Target
    file.exe
  • Size 274KB
  • SHA256 574b077dd3e9f8ec41d2cd919445b06d765af63da6c5fa55c02843c4a486f638
  • MD5 f6f84d9ee95b7a6dd21838d21af0abb1
  • SHA1 82e97c60c1c7016952cfb81582ee794f1b287b10
  • SHA512 1fcf3551d3f7c84de8f8a9fd687c8eab16ab7f7559506a7d827fd01929f544c23308ac5c1f3d0d21474a4c6edb42e616d61f619eed533dc0bc803704425d199c
  • SSDEEP 3072:Ye0+emZjUhLyXugUYd4DypDvH/1zl58Bsn+vDUh51KCa0kT0l:700UhLyX7Vyydvf1la2n+vDWKCaIl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealc4109976902326622912460160242discoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2