Extracted

• • Target

    3b90a9c9300b3aa7f65fabbe9898a85f4e1972b558c686174acd7368f61a1f66

  • Size

    642KB

  • MD5

    f592ab6d3542f991fbda57b1bd4024f5

  • SHA1

    2562c766a4d6442a75ca488a9c8653a4dc4d93b6

  • SHA256

    3b90a9c9300b3aa7f65fabbe9898a85f4e1972b558c686174acd7368f61a1f66

  • SHA512

    fea247b4a3f46412610aaf123ac82b4d9a90eba1d1baab0bf88d5bc22b35c8dd1dcdc2cbc499ff802250ec456a683d5264685af42a5d7340af8efef900dc49b5

  • SSDEEP

    12288:JHQ4R78rGcukgmWRjAeQJqtoCldl4Dol9:1HhZcw95jOCloDg9

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1