Extracted

• • Target
    SecuriteInfo.com.Win32.BotX-gen.15571.29489.exe
  • Size 359KB
  • SHA256 ae3ae0f5f9d8e2911a2e7feecf26e9567ca3f4fe8a9b6c9d7f350c2db6e6e1eb
  • MD5 e2b0e31c9c976c6e6abbe7d82ea6c629
  • SHA1 872b2f5e29480c4a779d7a098279582766b08d29
  • SHA512 ba2772cb186dff10689b8398ffece622e387beeb9029d2d92c79e98f0671afb5a455952335d66fb9f14100e9611e1b7f728a91201ba4345d184dc0868961abd0
  • SSDEEP 6144:sLU7fB5Yy7d6fEM9GAtYEgw+0HEVlzIhsPFYc5PR:s47nPd6v9taEj+0kVlzIGNR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealcdefault3_capcredential_accessdiscoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2