Extracted

• • Target
    file.exe
  • Size 250KB
  • SHA256 ae124eaa39189cfaa3cd5a74837e40732efdf6e1850e3dccebd903fb0d619482
  • MD5 479df8b150fe48b3b1dda6405214371b
  • SHA1 cf6badcdf1d3104aa14754b6534c156ac8d57706
  • SHA512 7a51e021d72893e69aaac1a79ae0880834cb890562a1df34d92f45f41fe0e7042db1c077a75ea0ae81c5e45d126647360ec780af1e26bad9f921e06a72b8a8d7
  • SSDEEP 3072:qByI/LHnUEG9JOkU2jORzGprTugB49y7F0jsHRG5ds+X2:Sr/LHIrOk5xBy2uy6jfw+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealc8268873659707098636355379426discoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2