Extracted

• • Target
    SecuriteInfo.com.Trojan.PWS.Siggen3.35279.1356.9470.exe
  • Size 278KB
  • SHA256 2628201fa47cb015f5cc8ed60f7495ee3897a5b361971f82a7ebc2cd24cace46
  • MD5 444ef12c9c65d13a3ecb84588f25d884
  • SHA1 747acb8560b53a1217ddf65f315307119dcc6a1c
  • SHA512 00165426b6da702f79416abfc9dac051d013efc4c69aaa9bd1c932b1931cc3620ea11fd1c47593f099abde4d588c713a9f4cad293df01482921975e1188a571c
  • SSDEEP 3072:bxW0wACiOu/LQ5E2eqFuZJiju1Yx0RhC3pbrbg+n//aIZZ1Mg4y7xveB5Jy+Lddt:dWOCiOu/LQw6u8ueVHh//hV9P7xg5fl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2