Extracted

• • Target
    SecuriteInfo.com.Win32.PWSX-gen.14129.7137.exe
  • Size 175KB
  • SHA256 e37f694492ea3edeba2e7b6c7b51a451e802b29b11e70fe8509dfd8a3fc8bab9
  • MD5 dd899fafab803890b22d1003604be70f
  • SHA1 eafb8bc48a1200c2529179044d1a56c2b63e070e
  • SHA512 e89428c8f5a14641c5de0cc5e9f16a0eb49eea1529a9dd9be3bbbdbb901dbfbcc5039ed81c0f97180780aa7b7e4992a78a6d308d0fe1ae41fabcfd992ca3c716
  • SSDEEP 3072:56BNcJHrdomyaOv26+QwrCjY/KYJfOprT804ydmUWkDxjnDo+:0Sp5omyaOv2TQgyEfOVT/tmGdjn
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2