Extracted

• • Target
    588a13b77a793d1b4c90a9702b0e5072.exe
  • Size 244KB
  • SHA256 476a074e0c4c3afac432983406efaa29f427f2a3cffa180c5bb808865b44a74d
  • MD5 588a13b77a793d1b4c90a9702b0e5072
  • SHA1 927d08cdc06fa993450a82aafd914cdbdf8e014e
  • SHA512 68e3916518f2d319bec43da3d4c0c08947f46e88c99d52892c99d5c63935bf4ddf89bf45e2a56913a557f0f71bdd0fe7bee01ee0842706f68c7aab13ee0047c0
  • SSDEEP 6144:DJyqfBd7gUgOHt4CmX/OGkG1EPb9UmfHOO:DJytUgOHtPmvOGr1EPbLO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2