Extracted

• • Target

    2024-10-14_7f6aae495b9d38ae27b5dec29ffc8c46_poet-rat_snatch

  • Size

    24.7MB

  • MD5

    7f6aae495b9d38ae27b5dec29ffc8c46

  • SHA1

    b13cd3ec38717021566c70198de481539a0d39f0

  • SHA256

    2f8499f114e8fd0eaf3591cc846b98e5a810f0f4530455b5732fe732ba74d6ef

  • SHA512

    d986f39c999fcec75fee963616fab3d89a171c0a2d34122e5e306b9a6f37eda7709c39730ddeb2e4ea969c6eb9561d42d92989c316c25a47d364cbbe310ad61a

  • SSDEEP

    98304:dLfwfGOB/sIEEtPO5u3m/aP1ZZr1cDy5/BJty0:mRtEUOomaPHcD+pJz

  Score

  10^/10

  discoverystealcv3credential_accessspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2