Extracted

• • Target

    caef6f271771ae3d1abe4fd9a9eda001.exe

  • Size

    292KB

  • MD5

    caef6f271771ae3d1abe4fd9a9eda001

  • SHA1

    7e65dfe3cc95f88d7deb7ab2ace1cb911ab33cb0

  • SHA256

    78a2bba2b5340b176b67cb9c6d9fd1c984a4bb4d0ee6a041256b4dc733acefb2

  • SHA512

    de22d01bc030b0a6107786e8e33983726dc0e5a74e622bdf3a83fae403078322d570aeb88324245df81734d06450f57e981011f671b785808ab5dc85fc5451e1

  • SSDEEP

    3072:ptDqZkZ2CfJ4Yp0Bb7RULMMCvgdBqCttMxrOUbR:3DJACR4DRRUwMCCBDttMvR

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2