Extracted

• • Target
    SecuriteInfo.com.Win32.PWSX-gen.8525.21336.exe
  • Size 298KB
  • SHA256 7d688b03363b406594fd96854a887dd6775d34cda0bc214b72e1abff6aa10c9e
  • MD5 b80b532b831b07ac590527750adceb1a
  • SHA1 930f10376c35d0037883c7758d8412407a81f83c
  • SHA512 b373cc2144b2705604b47cde8d77f9bca606b4e9ce6674418fd2719f91e1e34327f1ba86c0388387b790c498bdc2ce2cc5ae183db12a329b2b748778837daa2b
  • SSDEEP 6144:1atS93EmsCoLcKgmoIhbmfOR2y+/hNFGMBxrp6:As93nsC+EmoqRRArBxI
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2