Extracted

• • Target

    89621c71528422a1b2ae34123d67a5196382b978de722614ca87e202e880b245

  • Size

    218KB

  • MD5

    be5c04358350c5d8580ca4a13fbcdd2a

  • SHA1

    c61fe8f35d082539aad9726ef3a00e04edd624cc

  • SHA256

    89621c71528422a1b2ae34123d67a5196382b978de722614ca87e202e880b245

  • SHA512

    934238731851702db721a5ec13d056fcdaea688690a1342a35628e12485b2dbe80fe200b999a04926a04ac22fed7b94a776a79527d7f470262b84cf5499412ad

  • SSDEEP

    3072:jv8m/fZOD6y0/4ZiZfqhZzVFdgJxuxkbPj0t5NL66m:bj/fZXZ/Oofqv15xac

  Score

  10^/10

  stealcdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2