Extracted

• • Target
    80cfdbd11614596b637b1954f7fc6f4b.exe
  • Size 247KB
  • SHA256 050fb37cf518be26c451c3acb4f58cf7ee174871b80ae4fcd95644f3cc5c2003
  • MD5 80cfdbd11614596b637b1954f7fc6f4b
  • SHA1 028ef61a5f38919fc54bc5fb7a214e4618e4cf88
  • SHA512 490287fca6d86dff71a6eeab583e127e87800a211aad8c45feb88b86b82d5e6e6a259cba4de0853cc361c983bab1160488bdf97246d2a7712a9d72a3d2f4f4df
  • SSDEEP 3072:QUL4690b4Mn4CbwLJxqryGJhTFQEaFM4IwQFQYkVkgu1h5tu6Atz:XL46mb4M4UwLq9JxFQEa/57Rt6I
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdefaultcredential_accessdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2