Extracted

• • Target
    ed9c0e66a6ae4b816d9f3b82247f8679.exe
  • Size 367KB
  • SHA256 af6e8f425fcb23cf384ca01f55ed5d1eb561b7ecbfa48264ecd8b51e460953f3
  • MD5 ed9c0e66a6ae4b816d9f3b82247f8679
  • SHA1 dbafd9fe855342b9f93f3677e7b6bcb19d7e2086
  • SHA512 1111eeeebd6f2008b317ddcd943aa5d7559af4c107fccf79f9adcc99eee3a3f3d05835cac8a1a4c81b495a8894aebd9df8961da155ff77630c0f0ee19236294a
  • SSDEEP 6144:/btXcYjEPzDdwBW+YQrGAvDzGvCw0V5PkCIa:/5fjEvqB1YQrT7zkChZdI
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2