Extracted

• • Target

    file

  • Size

    199KB

  • MD5

    0d66d350365b5dbf9a587b31b052defa

  • SHA1

    340e95b5c4cc66c1de7ae69cab5f8c6044cd5e12

  • SHA256

    0552f23284ed52e84060cdc66d242f9258bbe0555eab899355b9d848bbf70605

  • SHA512

    7430ff96e6d144fa7a3317c686009acb810a86a5cf0137bf7a33bfc479f3c6fb88f928548b4dddebd03b8decd36396679ff8b97a7c177884ac328447d781d3fa

  • SSDEEP

    3072:d+0HYeO0w76p8WiayDKwGJllF0nXH6mpCxic7LHaP0+PMH71uqc:seXO88BasKw+llF0DpuiCHO0+PMBu

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2