Extracted

• • Target

    7729e5b688bdac64950e3245bcc28e027c34a4528070cc014b8e3fc061ae56b9

  • Size

    334KB

  • MD5

    34fb465700868748a4a49d1063e3e8e2

  • SHA1

    62771ea2df6b9551010d51f4f931a5a055fe03da

  • SHA256

    7729e5b688bdac64950e3245bcc28e027c34a4528070cc014b8e3fc061ae56b9

  • SHA512

    97faf2c0ef7434a842edb8c7fe1caf5bc3e1c65f99b9bd3c9722343c4a169407285abdd9ffcca44770f2540f4a8c7134b29947764c4a38277449860095a08094

  • SSDEEP

    3072:QI1d4WesJ0cFs/atixriVcD72lcdTXeC3jgtklNP5wfxGf5XyBk3eFx/RIAB:p/4Wej/atCh72Cd33aZGc5

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1