Extracted

• • Target

    9f1c239226fd84c5e2f72a8707cbc0cea05d227515918b4b462e0971332d91a9

  • Size

    218KB

  • MD5

    28a1ec20020e0f282a7467bfaa73b1bb

  • SHA1

    09321c21c96014d1836b3fe25ffcb3132a6f9ce5

  • SHA256

    9f1c239226fd84c5e2f72a8707cbc0cea05d227515918b4b462e0971332d91a9

  • SHA512

    21b098d4869e930f91d4bf9a7061eaa5e0e365c0462ee3f4653f0317e22b1c0197cb71548ef29be510d58a6b7b9d9dd050c725b675c2e774e75511f5394b384c

  • SSDEEP

    3072:PAhQ//Key6sTKdNJh80s+BSi5cHUICx03C1withR5bVlgM:Iy//KycKbv80s+V5c5C03sjz

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2