Extracted

• • Target
    2026-01-21_d94c022e469a86a64294e2a7d9bdcd4c_cobalt-strike_icedid_stealc
  • Size 281KB
  • SHA256 695a94b0d5f2b955875326d916dfc387783f9e033a7fba7a8bde727e3941914a
  • MD5 d94c022e469a86a64294e2a7d9bdcd4c
  • SHA1 8d09e93ce1627f9a60a9c4ff8f18a0e2d1a77400
  • SHA512 85255d75bae329ffc88d9f88d7bccc7035df386498c1bc2590e4fc1f3ab79e588128132295ea88ee962997f2348c4a0dae442f95f773a248b0258182ec9a0769
  • SSDEEP 3072:B2D/V1HJAASoYyqgUBh8rIb59TTElevVFg2Wf35KQEIH3HNHi4i:Q7V+XBh829T/74793B7i
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  2026januaryoffersdiscoverystealcspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2