Extracted

• • Target

    SecuriteInfo.com.Win32.Evo-gen.25063.6280.exe

  • Size

    10.9MB

  • MD5

    acccb5d6308487da88b2f05b2f4f6234

  • SHA1

    78f5f4776947ffd55850b376211d6c8b1139e202

  • SHA256

    f188aaf2e67a048f1cfa0ab7758ac80b0e4a1167042f55176e4ac0d273b26744

  • SHA512

    331fee4f0e672ddcd89db513ab034dc4c652c531c132676fafda355c2206e69d747e4e3f4259e80ef41812ca89666ca4c245cb7dd4656641f950d87b558e91d3

  • SSDEEP

    49152:L8jB0EJgiY3FGXiSLruMH0A0PncurVqhTWQa4IeWKDHIoZcjPeYgjBd0y/ES5TcQ:oF0EJOjA0FrVXgj1lFASTUDHDSNOy

  Score

  10^/10

  discoverystealcc1credential_accessspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2