Extracted

• • Target

    21bbf325266d18800ee88b8071bede47.exe

  • Size

    172KB

  • MD5

    21bbf325266d18800ee88b8071bede47

  • SHA1

    b2993ed2090a6652d275b6212b2a456d1df66a9f

  • SHA256

    cdba3d9ab743f665ce9449eab6010af6aac142e03570bcdc899b0a5866b00149

  • SHA512

    f909c0adffa2919f80a80843ae9a12276aa8777f85511ed1bf3d9cd11f7813c9228a76e7499ae0c746646404110cda25b8f148954f2c402c3986a039a386066a

  • SSDEEP

    3072:tUS3qxecjI1w8J1ANrjcCeVlWXX8a2nzA6Qq:tUWqxlk1ww1AReVlNzuq

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2