Extracted

• • Target

    95cc300618cf5a0abb4b36427d838ee00bc37e515bf527ecf24725d70610c993.exe

  • Size

    247KB

  • MD5

    2a3773e1dccb10a11d39139b2a3c4700

  • SHA1

    6d19664ed14bc2f1a8d06948c02105c489cc6b96

  • SHA256

    95cc300618cf5a0abb4b36427d838ee00bc37e515bf527ecf24725d70610c993

  • SHA512

    67a90564bdf119beb271e2b008b6a5e278b7cd253ed03626422fcecc5af41a40b40bbafc42f22fb7fc9133978033d31a581c980deaf8e96ee9d94bcc6591cea9

  • SSDEEP

    3072:B4VQxA8+X0F7Rq0iu2yUnF64XBqf0wKxF0EhMOR8F89pUpx/p4KCl:yyqzX0F9nZgF64XBk0wK7eF898x5

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2