Extracted

Extracted

• • Target
    krypton_client.rar
  • Size 13.4MB
  • SHA256 5b3a6c1da657c0acdf28ece6c4406cecbd56d0e5eaac45fb980b549df7faf8a9
  • MD5 00f7ac906f00b6497ce23ba8f739d631
  • SHA1 944f62d04ad5cb9e8ec78182666807debcc5ceaf
  • SHA512 3d6a85a7dada25513eac7c623080feecfdd595650a7302c18299361f316e74ec2ec7ec1f5aebbd31346bed003e6cff8893839383d4d65e79550512290d6a1801
  • SSDEEP 393216:h31c+hjYhwV3kUW0jhsqZfg/eh5FuMgpy8/:j9hUh40RkeqNg/ehHU
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  mixstealcstealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Executes dropped EXE

  behavioral1behavioral2
• • Target
    appFile.exe
  • Size 891.7MB
  • SHA256 b156320a7c108d396174f534a8db82e13d50108dbf9d71f91b127f4e3aaee1d3
  • MD5 3c1d1479de22eaf91e8c21a0b367cc5e
  • SHA1 2bdb401aae1f9d8343f9f8c31779caa44e1b8ca5
  • SHA512 7c5b4435596e33a352c85f946aa26dad29c364e46fa0950aa439ff830f8175ddbf7e3653a8638169201dadcce14ab22e12caece3e9a11c462c612c63761ee78f
  • SSDEEP 393216:2B1sxW9pBm+wQUI2bKuSaSavkvRRBGhVhHAfdndJwkPiA:2Bu8pDnQ/hAzJdPiA
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  mixstealcstealerdiscoveryspyware

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral3behavioral4