Extracted

• • Target
    70241b767ead356ff54eecae6a86202c.exe
  • Size 226KB
  • SHA256 c6b066e441a2740f87cfa1e2a8da69a5dc7814411088d3f69c4d9fe9d2bf2ce4
  • MD5 70241b767ead356ff54eecae6a86202c
  • SHA1 836d12cbd4d8340922886c46a1325ee558e904b1
  • SHA512 5f0308e7eee7d94c43981fe31ae238918a6ee0068159da00e07679ea174309a9d2ece2de4efc016f48e1e7cf7e74b6b3e544fc0b984a919f5c331706d5d77c88
  • SSDEEP 3072:s/+i8T+A4XtcDsn3t0Ueinnn3wluL6GN+1qkUgeC5gPi2I+:YZXtcDk0Ue2nn3wm6swq3Ky
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2