Extracted

• • Target

    13f988cf83eb5bc20a328cd827d8d18c91acb5cf6c6849c449f5d6b84192495a

  • Size

    412KB

  • MD5

    f8fac37829984f1febbfce18ed8edb52

  • SHA1

    bd982d0778fadd1ec72d1ce3f3378a06d9e78f50

  • SHA256

    13f988cf83eb5bc20a328cd827d8d18c91acb5cf6c6849c449f5d6b84192495a

  • SHA512

    496f304eb121244e42744d99ac8123f7a28d390f37cf42c9ec2acc69cd3336690174540eba190b29f3a342d9db9750e36d7ced7aa520de4a20062133b16a7236

  • SSDEEP

    6144:pL9YdI+UfiPfjdQfzGyjkWYOHeV+n2xlZEeemPMysr9q7X4q:pZYm36PLdQfnd1yEepM5g4q

  Score

  10^/10

  stealcstealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2