Extracted

• • Target
    8123caec2807143ff545f4c3af6c2d46cf80faeb37d22588533bce130b18e4a5
  • Size 297KB
  • SHA256 8123caec2807143ff545f4c3af6c2d46cf80faeb37d22588533bce130b18e4a5
  • MD5 d726862f58336169a09b3d559077d746
  • SHA1 a9254f57b81f94fab19a8d60bc68790a3c825896
  • SHA512 555056f9f401bc7ba3ffb9f1ee116a2c5ef07157c054d15f3a925626beee42f4d55b0a330095afc5a289ef9c2d84ae16e1c17acbc8d226aff1662703d4dd82e9
  • SSDEEP 3072:tZYAYvUpp+dFlvfvArq/Nh+tmfiXhAxU4rHLQ+fFxtBWqG1iq7vMk/itpTn:tZpkLJYreGm6cXB1GdvMkipT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2