Extracted

• • Target
    SecuriteInfo.com.Win32.BotX-gen.2760.31706.exe
  • Size 342KB
  • SHA256 96aee723f4e99b71d216411e44fa8f10a9ce7a01df947cc0c41aa8856076fa1e
  • MD5 382c67e9b4bedb4007e0445192e3ee71
  • SHA1 549e6d43f325efca5b5e6d9c77d1b9f571a4fadb
  • SHA512 ad12b8b97f470ca422096f097ae081ab07ddfb46421a38c38efc6beaa9df5cd1a578a85c2d5d5f77079e427930fdc1c3b07ba9454dd47a9263c95f49a789b274
  • SSDEEP 6144:gYbvk62Lsxd55lHaLoFGVs8aJAyizYU7NK/amcIk:gw/2OKTS8NyQ+T
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2