Extracted

• • Target

    ca7adb69334ee376e9cf6862059ed750de7406141a4a7dd8e97cd49b76b758b9

  • Size

    264KB

  • MD5

    9ac1492566c4c6e545603d7ba83afdff

  • SHA1

    203fa1dce06b2998c61885804ff30eef48d7106d

  • SHA256

    ca7adb69334ee376e9cf6862059ed750de7406141a4a7dd8e97cd49b76b758b9

  • SHA512

    3186701762b2d9c7d0f333b21cd4e2eecacf65b9b6b5d02a825881c52f9db852383ac9c227462bd828039c579f9b83cd809755d8ad09eb048a7b935ac957ec5b

  • SSDEEP

    3072:Pq1xXNepfRZ+eDY+/+gT0AfWZsjVjaImjrg1vFRQRqhYn6cm+GgplZgVwU:PGY15UrgTfDmjKymYny+Gb

  Score

  10^/10

  stealcdiscoverystealerspyware

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2