Extracted

• • Target

    10867c6dcde4d1034e46fd1522bc71dcbbcfe11c86f8f507bd9db5b1bc902782

  • Size

    223KB

  • MD5

    eb0d690f4e8e9809acedf927eb97c308

  • SHA1

    91e1e0dcf5f38ab7a3ffb9426c392815c56c0f73

  • SHA256

    10867c6dcde4d1034e46fd1522bc71dcbbcfe11c86f8f507bd9db5b1bc902782

  • SHA512

    4ab217fe46f9235539b7156e7fefbee4a72e305a43f3b1686d03ebc96bae9eaac06b1c1d7a00df96c6be4c6785b0c603656c27b46f83d278ab8eadda99a3f00b

  • SSDEEP

    3072:cs9W7xlxgNU2oy9BVuN+vZ/TrzAdqUpSvIodC2PmH4yOiLXYr/QmEWjLYS:cXrxP2jkNAAdqUAFEtYPWXYrZT3Y

  Score

  10^/10

  stealcdefault11discoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2