Extracted

• • Target

    c8e9cddba27fa70d43d3f723195e2cacc16e3b16fdd4f0da41ac3c60dce28735

  • Size

    258KB

  • MD5

    01b6e4c26dea623d00ff47cb2f78f78f

  • SHA1

    3b9622bc4dedb3d0c9cb8b3df7e70001d3f8d6d8

  • SHA256

    c8e9cddba27fa70d43d3f723195e2cacc16e3b16fdd4f0da41ac3c60dce28735

  • SHA512

    abf81e0f6ee2147ab8dbb45b4baab2af1f5ddaee1d7829870fda3ccee9c1674a8890f2dec54e6b8556b655445cc7b730dc820c653188b1229dab072869f969c9

  • SSDEEP

    3072:zPWw0Vsg6GESiw8mJr9GHAo4Ec1NEn/zZM1NH5EVEkiZXRBb7ovbDhXf:rWwW8mJBGHjxn/zZM1NHApufM

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1