Extracted

• • Target

    5d4cd79354570270f52c6647993ab42b00ab3f388d9503b4104286d1497caba1

  • Size

    444KB

  • MD5

    a977f50dd4332125e5549da181e1b6c4

  • SHA1

    f08301780e4a044345cf9d513adacef57058ef7b

  • SHA256

    5d4cd79354570270f52c6647993ab42b00ab3f388d9503b4104286d1497caba1

  • SHA512

    049c66eabad487eb262a27de3d7efd3e77c35ed7196e34d58b79472c0c4b153cc104ae85adfce2a45bf58bbd42bc7fd9d01a75ecdd1acbe63b654cff8c9b9dba

  • SSDEEP

    6144:lxizvP+H1OFMqWaVocJ5b8R6WkRYHtyqr7RWoP:z+vmH6xWaVxJ5IR6WBFrtWoP

  Score

  10^/10

  stealcstealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2