Extracted

• • Target

    syncUpd.exe

  • Size

    240KB

  • MD5

    34c0942de85e9d78be772fc132b27288

  • SHA1

    84a62b658ac354d128b3063d8f4dd009fca19066

  • SHA256

    76f5084bca22085b3c76484470899bcb77f86d41208d354cacd8129f0b464b00

  • SHA512

    e1145327d08724427eb3df705b8ea63c10123ea461de0f1694d2dd007f33dd617e57569e90c484f82b1b41dfda138bed75632f69b2357fdb7d9ac905d81e4a0d

  • SSDEEP

    3072:PfULUw/ete5U+oXT0vHxNnQmaNyKqrykIbghLwgeRp:PfULzOei+oQ/xqmkDvQUge

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2