Extracted

• • Target
    SecuriteInfo.com.TrojanX-gen.15227.19452.exe
  • Size 256KB
  • SHA256 4e2aa34c81bd25fd73d3e49807c9db0af7f98d0882fc5f912989b0d1b772a34b
  • MD5 fdffa8e0c0ae13e283c02e285f2174ff
  • SHA1 55fedb2e4214df1162ad27beb3fb857741bc0484
  • SHA512 f1eef0271bf1561f33235b9cd4e85c217764ca335db8d67dc654bc05f44887f643df9ecd20284c9a8179a7456ce4dfa3d2359e91a2befed6f77e1f757feeb0a9
  • SSDEEP 3072:HEIf92GuPxVhmZjXYReyk9vS6Bns8O/m1G6/wHYIpq+2X8sHHsibrhQ3sLeeoGOg:qGuPU1YRM9S6W8O/WdY4IpiXprWsKeo
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2