Extracted

• • Target

    aa209822434e1328d83dc30d14f5f177b9f906ad33fc033e05a33a6196c6ff5f

  • Size

    230KB

  • MD5

    230cf90d72bf1c23aaee2037514c0556

  • SHA1

    a22b7bcd3661da01bb71139fdaffb855d1b7bac2

  • SHA256

    aa209822434e1328d83dc30d14f5f177b9f906ad33fc033e05a33a6196c6ff5f

  • SHA512

    3d7c8dacdef00e892c9fb522e4d630806577b72ac35f7fdc4a723d4b91f022e489a29b8b7f84c106d6803e25970e96d90c00d8cfd7364a7685ecda744d817587

  • SSDEEP

    3072:+LW2LXUFEpLWbt9TC0Oe2AbTrbaRxB/0p6W7d7XrHRleJMDi4mfK:v2LXU8LAyHen7+F/A6I9/eJMDi4m

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1