Extracted

Extracted

• • Target
    ZalypaGyliveraV1/ZalypaGyPovtorka.lnk
  • Size 2KB
  • SHA256 adf679dec47537b2ccde172461677e193754f7cdfc0faba14fd85ba5a873130e
  • MD5 beb17f6be0348770d4b105c751073295
  • SHA1 f47fc12a8ee80a38fd50ef67efbbb5c4a5498786
  • SHA512 5e24a887d75ded11f39890ba758ebb39aad52bda707e6f743e114855e36f55920df14edf0baa32558787c3a7ed3fdc770f99bfa8f29696516d726626a3ef3c0f
  • MD5 SHA1 SHA512

  Score

  10^/10

  rippovtorkastealcspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware
  behavioral1behavioral2
• • Target
    ZalypaGyliveraV1/ZalypaGyPovtorka.py
  • Size 10KB
  • SHA256 8ef72e99a194d9ef303fd83dcd71bd0c470e87e2c2de53476f2b5b9372552571
  • MD5 68ea93d1ad85543fbdce973f36613f9f
  • SHA1 ccd5df434315e68efe9b660a14aaa934815660e9
  • SHA512 2321081d17f050dad8d4b1fc62267820ff897dde0ac4a9f2a6821c59b3c9b7382aeeb141b1f7e93c2a8ce108a74978b19951f383a808957ac4fb5e417789287f
  • SSDEEP 192:9y/Fv60G2RIJhjzU+Jsckexvf4NDbDX/av60guHmRWGGfua:9y/U0G2RQsIJavDCvJEL5a
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral3behavioral4
• • Target
    ZalypaGyliveraV1/ZalypaGyliveraV1.exe
  • Size 96KB
  • SHA256 277e4d94cf51fc17c483e5e2974e374723281994b4c7fb3011269f1dfac60d46
  • MD5 14c9e5947784ac72ae3ff13bfd18226b
  • SHA1 c7fff6d68b5cf3f0124f3191f7e435059ce39fe4
  • SHA512 4eb5f05c676f80728fe28b5e8352e5ca8f1031210797c7b63508d847495bd87fd0f839e62d1974c03a1da4e11cbb26b9d6d1f834e64ae72e06904a9729da91d0
  • SSDEEP 1536:sLsQhIxHHWMpdPa5wiE21M8kJIGFvb1Cwn/b3suyg:sLNSwMpdCq/IM8uIGf1/b3s
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral5behavioral6
• • Target
    ZalypaGyliveraV1/ZalypaGyliveraV1.lnk
  • Size 2KB
  • SHA256 aab4f3ebf1fcd92198ddfb11fc961f81636a11d7d16719f31b63e9c5ebed4ffe
  • MD5 2acceee2fe033892ca25f72b43cb2327
  • SHA1 ad1e0111eb1bdf21bc46fc6f83694381e7f3d026
  • SHA512 33483638709eae01c0abb92a90b04f70b0b12e5dc880dba314628f857b10dbccdc3d57d7939ce0fa843dcf1c8029de3fd243e9abe0af93758a100e9f8b2708ee
  • MD5 SHA1 SHA512

  Score

  10^/10

  ripnewstealcspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware
  behavioral7behavioral8
• • Target
    ZalypaGyliveraV1/ZalypaGyliveraV1.py
  • Size 13KB
  • SHA256 d2e1116944b1234514d6bafefc02c3d095ee04b113633ac2fca74a24d27f012b
  • MD5 a57d9d3ecf3a4f8dcb021b1c28c8f837
  • SHA1 a93700805f00dcbc34c41eefb36be3b2caec64ce
  • SHA512 2b0fdb8a7ae22da9aff249ab37b336d6349e27daedf6c73e7dfd7de2854bb28941747d4ad88fcf0a3adbc3a01cbedf4b91c4ba6c24d01560665c52a38b95e2c4
  • SSDEEP 192:9C/V25n8JOKLsKQ0BgJc8W6amsIVX6NG6LZjZVr+mn+vk0aIHJd+PgGHBKBhHsA+:9C/yKEv0BscRNmgLZQlP+Irhnc
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral10behavioral9
• • Target
    ZalypaGyliveraV1/_asyncio.pyd
  • Size 65KB
  • SHA256 9df2ee17981c161b509de01ca607f151aad3325d75881513717f069c02304ca0
  • MD5 c4931fc4e19ac6d658ba0913cd91b3ff
  • SHA1 21002d522e56ab416246b851b0847cb7e0faa6f6
  • SHA512 e6b58408e0e39fca11b239ded47f7d67534383e44a33599a587e629693837ed30b544a037708ba7753a99379cf728481fcc9a1930a5af918bc9c4c9681283f0c
  • SSDEEP 768:wyXO+bU+d/PKmQwQaS1wZtKfSBBGBaGY4jVdu/Yqih8ZIesnGWDG4yT:wyXO+bU+x2Zhf0G5bugj8ZIesn7y
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral11behavioral12
• • Target
    ZalypaGyliveraV1/_bz2.pyd
  • Size 88KB
  • SHA256 1f60878eb17428fa5b0d8adecfe789249b7161111224d6b574d8564e795435b3
  • MD5 511443d02fd54946fa1aa1000f00bac9
  • SHA1 a6d960823b6e3c9cb8a97bbba241ef7ba7aaebf9
  • SHA512 144ba5c96946c77a3991208425a403a8f02f2f8f86e59f4c7d49792a2d92e0d5787131a4e62c386b35c73adb7693328904c7197c6076b22427c1f5f69ed11325
  • SSDEEP 1536:9KdsFWs3qhWShV4kGoq0z87G/Nd1b8VhIe4VCy:bX2WIHw7GFd1b8VhIe4V
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral13behavioral14
• • Target
    ZalypaGyliveraV1/_ctypes.pyd
  • Size 131KB
  • SHA256 32f87607d5ba1cd5af177334e8e714b7c2ede39b1610181888b7766d3fb03f7c
  • MD5 0bb68161dcbf580d031ceee6bcc8aa13
  • SHA1 edecfe0a0dbebfc278d678ec5a6e4392725f8bc5
  • SHA512 40dee939cce0705efe4d8d51b8115bc676a354ddac5ae3ef77a4f2e12b43274112bd0d0d1921e5b65b861bfa1c30547c1deebc3772d55f93ab17612659242b08
  • SSDEEP 3072:psy28VkcZ95xTGZfB8iDNfYqfQFVZei9IeVPE:3V1ZXN88iDNfYqowi
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral15behavioral16
• • Target
    ZalypaGyliveraV1/_decimal.pyd
  • Size 261KB
  • SHA256 f675c06e7cb490a35f85b2b4002495ffcd9b811e0314214331a516e3cdc0f9fa
  • MD5 d35e4aaf4549ca18b2d05f8df8245ed3
  • SHA1 7095502db60291373e07f03edc92a8c623866832
  • SHA512 6edeb9fd416ecf58212dc72eaaa21d7902b56b9d8b0d38d291cdffd77f487fe200dba28763cb5312b31ce4b2d20632e3c7cf77e9f0b08afb8bcac2cf00b33459
  • SSDEEP 6144:frgg7Dtmyp6mk02oBqzUFJ86qWra38LWbAL7:35NlR2oMz4ug7
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral17behavioral18
• • Target
    ZalypaGyliveraV1/_elementtree.pyd
  • Size 204KB
  • SHA256 439e7eb873b3e06dac993fe4caedf893f631c3bb4ea80f52fa9c9e61ecafdecb
  • MD5 6e35f43ea82e5a27135c63a3c72c5c7c
  • SHA1 e72de13eb0375aa0b9df6c8021ad56f33c79c771
  • SHA512 5e746ccd64dca2a7aaa8233996a68cc98abccbe2e64ddaedfc5f9cd1cdb8eda09266237e1aca0edcb3acb89ba9ace10faeee751969b6ab25d6c3f48b79942e84
  • SSDEEP 3072:auJP/pp85oz99o9PKwseOrc6RTCFE5E9kJfLU/0Rgl5DsxIeAfi:bzG5uowwsxr7RTVvDOOg7QD
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral19behavioral20
• • Target
    ZalypaGyliveraV1/_hashlib.pyd
  • Size 42KB
  • SHA256 81dfe949a703365363fb961361b775d65ce6e2dcd9e6ea80adbe06e8dd5b760b
  • MD5 f5a9fcfa976850f56e384b711fa86d7f
  • SHA1 9dfb24072e8ff69cb26e3df373aa866cdf2149ef
  • SHA512 6de68f334379668afe8e64572b142f020ad88c58f455b8badd2732a33bd0ae485945b689b1182cbe04f36a427867ab857c3d1588df4cc2a25cb9dcbce7f7760f
  • SSDEEP 768:iXE8mT3HxFQHj3JCxh+GaqX0pjhZIesI9NWDG4yBAg:iXEnHxFS3y8W4FZIesI94yBAg
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral21behavioral22
• • Target
    ZalypaGyliveraV1/_lzma.pyd
  • Size 251KB
  • SHA256 fb4653cc539dc9a562691fc7bf26cef9f25dab6bef89669f5d4e01207f7eefce
  • MD5 ac37bfc7cb1ff31da93a06fd0c8caa18
  • SHA1 090143ce61476f599c646a5121c3031d2679dcfd
  • SHA512 26a5925d8c016f9609d8cfd248dd717672a5be5bec52d5bea3256fb83ff9b816611b894d216a901bca4189da3bbc6bb041bbe7005420aa1352840da6f7a7f961
  • SSDEEP 6144:jGuJGAjPYFDwQbmqINMkb/gOohxwobHQqDNnkC/4O9hMwNbwqKN5kt/POlhAuwnD:NFmbHVmtA4w
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral23behavioral24
• • Target
    ZalypaGyliveraV1/_msi.pyd
  • Size 38KB
  • SHA256 7329197ec69afcdd32a4f73344bc12bb81b730ad32d675d0a980d67fc9996e7c
  • MD5 64475045203f953fe09ea6705c3bf33f
  • SHA1 f4ab585f7490e274e0e27dfd6ec1d2d970e96c1a
  • SHA512 eb231c25baef963b61cfdf58ae7c71a5f5b29915be797cc80ea4956eb545251fd206a97bee07625454370d3e1198661f82d6fa700318f0c0a44d6d58d4e0e500
  • SSDEEP 768:HONVwCdQZx4k81llMuLoedZIAUohPXW4q6CakhdBMzvhIe4GBWDG4y:s1QZpAdvW4q6CPd2vhIe4G8y
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral25behavioral26
• • Target
    ZalypaGyliveraV1/_multiprocessing.pyd
  • Size 28KB
  • SHA256 8acb763bf2a6c0a399b92b71c9210449836b576be5624c236c33c3211e8421f3
  • MD5 d0fcd09883c8fda4a3b23d88a9bfaa4a
  • SHA1 9d7c5e53d3decb4ff684d435647f5df1870eef6c
  • SHA512 8033b95e07fed8ac0583e2ecd2216201087e36ff4245817ceccb04c4d4d4e4c1abb3caa5d561088393ae1e33c1bbd6582d30f9160f28121291f5a3b53b8e6aec
  • SSDEEP 384:ervy78h0L08z8s9JoYz7x/HFxgJ4hM/UIekBLpXdnYPLxDG4y8juVqF:eP9wTzNlWeM/UIektpNWDG4yTs
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral27behavioral28
• • Target
    ZalypaGyliveraV1/_overlapped.pyd
  • Size 42KB
  • SHA256 23c3961908572ec59956fbbc5cc05a13be58c61b56dd385d230c3628434339a8
  • MD5 2a43dc038c1266a77102991e13bb4d02
  • SHA1 bdc9663fd7c460cfaaa793b7d0f69c54cd362b92
  • SHA512 fe9f0da61f86b265d2847cda5948ddc336377d256f4af75bc4e60f8767ab30122346648b243fdcc70ea663792eadf99e608e79a270ab4fee551c0b2976d68c2a
  • SSDEEP 768:8Ghclv9X79iSrRaMeX9RboJ2QF9/+8s58GoYQMY+1IeJtgWDG4ypu:8G49RiIeX9RMBs58Ru1IeJttypu
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral29behavioral30
• • Target
    ZalypaGyliveraV1/_queue.pyd
  • Size 28KB
  • SHA256 3eb03d1d29e4deb3dd6119c5a8c7306442efb0e8718376d96273882864b01ce3
  • MD5 f45348bebe0bbc310439727311b45c44
  • SHA1 55692b9c4aa15c8f3f35a38acb94ccf25c2c965e
  • SHA512 70ab522e244cecb24f48ae3af3b80510fb129d1cff71da011f60559803a6cafa04aa297f6ee68fb67f7d1491baa9e4600f9826c4fabdbbc78efb9cdcb302b45c
  • SSDEEP 768:D2g8qg+csfdvIwxRn6r99IeqUdWDG4yv:D58qgmNTK99IeqUIyv
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral31behavioral32