Extracted

• • Target

    99fad17313297da97105802d647b80b6.exe

  • Size

    451KB

  • MD5

    99fad17313297da97105802d647b80b6

  • SHA1

    6c2dea3d27486863a220b9dfc7ee30d8dd65903b

  • SHA256

    6edf3196e1691e0034185df3ac2eaad51a33248c305e35927fb5f6b5e13fa58e

  • SHA512

    40de9a35ddf446b5b21a07c2dc4c4074bf9bd1d024c4a7c368f5f770a705c83d8e9f4f258ad6d4bf510617b5bb0f2a070e6a0fd100aa25e5d3aacc7431e34466

  • SSDEEP

    6144:z2hLDaY1jCphfzS+2Yex/korSNb5xBHGJ0gzYAq:6hfaKUhfmxZIb5vGF

  Score

  10^/10

  stealcdefaultdiscoverystealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2