Extracted

• • Target

    22d74e0f424ca022928d88b805155197.exe

  • Size

    19.8MB

  • MD5

    22d74e0f424ca022928d88b805155197

  • SHA1

    b87f90a2391f32ba59e30a3d5ef5ebccf293ae98

  • SHA256

    8cb7719f28789df2af73a81bbf5fe00d87426027017ba46b82f4a4b873145cdc

  • SHA512

    2135178556ea4001e2e987965672a8f16c1581071a04bccddc9e622d1286acad9fa7ae0f4d73a35a2295ec5b7f26654514453075d7139daece41dddf7d89c870

  • SSDEEP

    196608:Cpq/yip0b1ASmn4sD/W1otjRUQfM6nUcThbk:CLiC2SQ/AWNh8cThbk

  Score

  10^/10

  discoverystealcdefaultcredential_accessspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2