Extracted

• • Target

    f5748244010e9e8c2cf4da8d7916c12b1bc808003d7f9e46da0e2adc85edf90a.exe

  • Size

    293KB

  • MD5

    8d48255ac20f28b94dfbbbd78883aea5

  • SHA1

    89844c5bc949015b9c8d2e74c07085dafc03fc0b

  • SHA256

    f5748244010e9e8c2cf4da8d7916c12b1bc808003d7f9e46da0e2adc85edf90a

  • SHA512

    76184e1730c94e58eccf13df6012611d844e904fcb8b8013484c7c8cae9d19cb855b5f92bc05b00c77cefa5c678768b540126fef4c2c795328e4591557da9db2

  • SSDEEP

    3072:lonX/pzSGvDXvnxfvlQ99XJIWC0aN+sS0f0vgNIEg6TArwg85ve:6X/ZSIPxfS/ZIXG0f0v6TAsg8F

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2