Extracted

• • Target

    a6395f652c356dbcf03a082e37853f9c.exe

  • Size

    101KB

  • MD5

    a6395f652c356dbcf03a082e37853f9c

  • SHA1

    aac503dfad03154cb41f8f9f66a2f1c69a2b9d78

  • SHA256

    5ebb58edcd349c0e4e5322953c82031c8bbc570511f096e8fb7b902ddb0e9557

  • SHA512

    b65791845dc3ce2b4136c8dffba5e55e2d143bb68090a58ec8e38f1e534adf151b41e887cfa2c8eaf94afcc0d0f9d2292024ca80296f927ef8b956a0b6186d2d

  • SSDEEP

    3072:TK0ufpwQ5jXl9t6Swu6bCYf5z46CyOVfFgtI:20uiQ9jtpf4DHO/gt

  Score

  10^/10

  stealcdiscoverystealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2