Extracted

• • Target

    98e47c023430666672d18ddc47b21e511214a607d8a86586e01e2d33bbe20b35.exe

  • Size

    101KB

  • MD5

    b663d60bac4cf5c09fd1399aa29f38e3

  • SHA1

    dbf52a4f440ce4d8236b7dad5dd9802a5bb84644

  • SHA256

    98e47c023430666672d18ddc47b21e511214a607d8a86586e01e2d33bbe20b35

  • SHA512

    0c8bceb23f8dba0f94713f7cf5dab0795e9c3c39aeb2ec7a3ce13641999b2aa2b33bec2647400f75213d61d5600a3d5a867d01c5fe075d68d18aafa649530f07

  • SSDEEP

    1536:yV/6ogcasplKQJa1HmAlfR9Rwk/Tr2GreyjS0Pz+Tcgr6SzI41jfwsLkWTeTNuS:U/vgwFJ0mi2kWGreC41jBFeZu

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2