Extracted

• • Target

    10566e44103fc0090768d5e14760fe2ea1a1dcd6ef72c8f7b77a1f710013eec6

  • Size

    420KB

  • MD5

    9464ab98183cea278388c84e493ed187

  • SHA1

    3e8f3165157bd8dccbd63218c848234743500a25

  • SHA256

    10566e44103fc0090768d5e14760fe2ea1a1dcd6ef72c8f7b77a1f710013eec6

  • SHA512

    33fdcba6ef5010ad48a3c5fe881e57fe0b424d736d449078b4865f9c7f463b72616aec20b4a818c7ab03500c564179b728ea8b5a95930b33a46dc238da4f9249

  • SSDEEP

    6144:vU4YUjurog96eMmm5uu3LdGBn0vA3fdrThHidv6YrWGQUlE:vGUjurok6eFm/3L80vA3lJMv7rWdUlE

  Score

  10^/10

  stealcdiscoveryspywarestealerupx

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2