Extracted

• • Target

    file

  • Size

    254KB

  • MD5

    308f20d5ead9c5a586c2c0174b31a4af

  • SHA1

    c403c72e249aa6b9bd499effc0e78ac4bcc73bba

  • SHA256

    20f1087a34575a211a19f1ac7f8c9743030c21db5bb2e4c34c698041c1be3b75

  • SHA512

    da991eaedf37b6680efd458eafa90ba2547a86d71a6a872fba917882bcdfe3830382980abdc355927b4481737476a8c679fc957f4b1be896f54f353c4d97f8db

  • SSDEEP

    3072:5wXXJOYvYLd6OeMZrC0tu3AYrMKR4RBI0fGfqRLO9PKVLEaUWvuj+5004UtfrA:GMYvYL47MZe0QQj/RcfTVaZuzH

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2