Extracted

• • Target

    c3108cefdf629f631dbba54af7124abc.exe

  • Size

    420KB

  • MD5

    c3108cefdf629f631dbba54af7124abc

  • SHA1

    c9f7a200239da2e89ba8da6afae7fc87cf19537c

  • SHA256

    91171af67f002002c7845dfc79d87ebdf86badd5c5f91727d00405d5638ab841

  • SHA512

    5afcfff2041b4db85818097e453e6da7c1fb5e378688beeb50b06287b456fe82eee7020b38d37e03f9ee28383210e6a266f3ce86d07075bcf9467efd704ebb58

  • SSDEEP

    6144:9tG76pKx44R/AdKguTHgQ5pe0stxs9D1Et7IqCARIICAblFC:54RuuTHgQ5+UZ1WCAmDM

  Score

  10^/10

  stealcdefaultdiscoverystealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2