Extracted

• • Target

    5bc51fd4f0d0ff303097f4d8516f4323289db86de9c36158a4bcf8d38bcfd778

  • Size

    330KB

  • MD5

    ce13f0778f5fbbe5a368c41d7bf50a5e

  • SHA1

    71a36287c669616505c87122e70db287be3d40d1

  • SHA256

    5bc51fd4f0d0ff303097f4d8516f4323289db86de9c36158a4bcf8d38bcfd778

  • SHA512

    d88cac0911f894a151916c82d979e50359536a2d3d3bb6cecd7ad99a2475b09f5dd209bb44e248dc7e081f0b17a3f687d7ae3aa67a32e4542e83280c69df48be

  • SSDEEP

    3072:R2YA0irBPruaYNZpuSqxw3VTn3+6QFaWOxgqLcXxcpcOIb5wDEl5vBIguvt6lGBD:Zir9efrq+3RnxecpcOf4pBI3+GBXndF

  Score

  10^/10

  stealcdefault12discoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2