Extracted

• • Target

    90eccd1c959dc7dcc051468c812bcce7.exe

  • Size

    284KB

  • MD5

    90eccd1c959dc7dcc051468c812bcce7

  • SHA1

    9851ceb8597965107b39c34bd74130fc7af00ce5

  • SHA256

    5da8648d9b7d7e080ebeb442b187a9ae776a79473a91ae4efb96204833d64167

  • SHA512

    911fb5f5a652048249ac8e082f7202eaa7f476d9bea695a5bb448a95ca854ed24e79106783b9309d2cbede99ba8226d6a075ff86f9268e1b74302dbab593bf66

  • SSDEEP

    3072:Av+mpTcgKop+p5a9pyOl8MqXiZuO/tVWtyJRix6LM5MEskfhkZ5LHBK04+OBB:CtcHowXiWiFctIAKHkq/LHBK047

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2