Extracted

• • Target

    6cf7f44941788fcc0475a5d105ab490c.exe

  • Size

    178KB

  • MD5

    6cf7f44941788fcc0475a5d105ab490c

  • SHA1

    b02ba0b65f5ccb1bc2d5412891f30e83d0a964fb

  • SHA256

    4f1338dc8fd876e127aa1678e334529ea78ae88e84f2fa4eef6f923109c54568

  • SHA512

    86a16bb24506cfb40215e507ac8e2b41c9b7f3d933c620b6e4aa9038891a4e9360c6d70fe896ef267b1a3406018596061d31d763f11b584316bc30a701fbb802

  • SSDEEP

    3072:6deRZGAVXZtsJSKEHX0zb+f0yoPWWOH1OFxxucPMZpgPKYY:V8AVXjsX3784F9/G

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2