Extracted

• • Target

    d015aabe92f1a3208a3e0b6ebaf85a3def932a24fb133bb7c051dc3768af4810

  • Size

    254KB

  • MD5

    0a1857343ebdb2c191d872e444fad837

  • SHA1

    975c4cf503b6322faecbf739db0dba5172819203

  • SHA256

    d015aabe92f1a3208a3e0b6ebaf85a3def932a24fb133bb7c051dc3768af4810

  • SHA512

    70416729fb19cda79acfd969ce19de0953edd26caf8db20d12e576aa26b97b37a9cb09862562e88d87a77bdd6ef19977a70fe8edfa92ad35e61725b896a9468b

  • SSDEEP

    3072:WPdL6Xit6oa0QyUOtowQauVw8MhvcM4CT5AqUQZ5XH3A7H3A4/IVE:CdL6Xi0/0loI78MhkM5yqUQ73Az3AHE

  Score

  10^/10

  stealcdefault12discoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2