Extracted

• • Target

    SeedChecker6.exe

  • Size

    22.4MB

  • MD5

    9ab945e80efc5fad000a94a77465cc6c

  • SHA1

    e60f7d0f3233b1c3053d51e661b94fb557eaa247

  • SHA256

    7ef48d31b3c9cc5b2104a48159798474f9b79e9d336a64df9220ad93f28b14c0

  • SHA512

    044ecd4736b7051af979e0f103f89ceb35105cf2be770f33a0772fdb8054d8fa2f9f5337629a6e3211657cebf8eb6fddccaadaf2d00d6bbc5ca2f71780a45a15

  • SSDEEP

    393216:NKvFfBDdk/pSKafXTTAgOmsZTXhKbRXGBEWBVu4WRryVJGjFFqW4gwcS9:NWF5e/0KafXTENmojhcyEWToryVJ0Fo7

  Score

  10^/10

  svcstealerdownloaderpersistencestealer

  • Detects SvcStealer Payload

    SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.

  • SvcStealer, Diamotrix

    SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.

    stealerdownloadersvcstealer

  • Svcstealer family

    svcstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2