Extracted

• • Target

    file

  • Size

    227KB

  • MD5

    a9e99032f074ac68c3e7c0dc49534382

  • SHA1

    2480aa49fa02da01bd46d49759a1d946635b3189

  • SHA256

    ff0bbfd33c3d090959b03d01a89022338d9cde31fee401b531a59d95ebfe931b

  • SHA512

    63d6c8f46b3919d80590bedaba8997591dcc5a5065522d2dc7620de4d2e9ad790d0050d7504176cb63608e04c215f17fa601fd3a6e7c1730a80c6abd8b8b725d

  • SSDEEP

    3072:2SzEByvpSW+n/iFtztStTPlzP1sBDmFc2pZ53DF2n/Q:N3sbn/ibp8PlrupmFrJ2n

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2