Extracted

• • Target

    file

  • Size

    218KB

  • MD5

    162d7b2525cd4c579b7ec682b0398a4f

  • SHA1

    9d3510adc5e2babf4d40d0fff76ec453c0a7ab52

  • SHA256

    5d5b4d8c173feecb01a31739dcd26dac3a22dc26a0a4922a8e379cd35b7171a1

  • SHA512

    b112213b5df2655fca3e27940cad6dda58b5830ae28a3150ed31b493826a4cf6c4d8aea4769c97ee3c84a391a2bb9e40b2fc723026eb14eec9dfa2a5e55b9ce3

  • SSDEEP

    3072:fwXzkmfA3gDOG+PLpGhQEjRUzJZKhqOJiQF/jT+a+WeXhARoX5lut87hX9:M/Gg6G+P9JEu1OJRFr+WAu

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2