Extracted

• • Target

    9ed6b42ee8e24887d73994e6bb6f5295402c904317fed2dc6272302ddbf0e1bc

  • Size

    280KB

  • MD5

    c1e6626ad23e023e89210208bb2c529b

  • SHA1

    25a8a9d092633f663b61bb8a6cbb227d3c3b00b6

  • SHA256

    9ed6b42ee8e24887d73994e6bb6f5295402c904317fed2dc6272302ddbf0e1bc

  • SHA512

    4ee4b44043d06366d838a87c90103a305f47dc0c772967625f2adc110091ffce11dd85b39c59478e21d00456b3acdf7d6a8384d5ce904e77db1b423e9da8c6e1

  • SSDEEP

    6144:WtPfuTksaBgTlrDY2cLVKKPRYyX7RS1L:Wpfqksa72cZRBw

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2