Extracted

• • Target
    d1e360f356f8ac430b5fed34b3a0a660.exe
  • Size 307KB
  • SHA256 b708baa9b529adc2da4c9dfeef1a7c62d1a9cc231cb82561334de8c0a99cbbdb
  • MD5 d1e360f356f8ac430b5fed34b3a0a660
  • SHA1 7aab5d765bc1c3d29510804bb5dfa14a47722218
  • SHA512 705060b9a70166724a68000f39142cee88d0951b33612f03619f6c40a2c9561a98f9bcdd5e210998d3cef9107b49cc560da22f7749c18a59d4525b593c2166fd
  • SSDEEP 3072:J5a5c3ZPpgukTT1ni8+WbLOT4iNm1jktYRflHMWUn72Z+qPz+yWYeiHEFI7I8NU:F5GuaZRIFmBSYtlHm++q7GmEFMNU
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2