Extracted

• • Target
    FL.Studio.v25.1.6.49971.exe
  • Size 34.0MB
  • SHA256 296c1f9234d3605216825597770584efcfec9de2dbb439aba3f3fd433c7b9077
  • MD5 80279dfbe1822d7056fec0c3c91f75bc
  • SHA1 153b4ae25f794be05192ad964b99cee6f1891d9e
  • SHA512 116137af2238b0222d30b7b5a39d422b36d838ee4ee9194d0e37a7573a39c5292478cd652d58e4f1d95a9d16e348e4a1c336926eeca8195b2056fc00b26b8957
  • SSDEEP 49152:fdOX5PGDCowloYe7sOzJJZlcTbW7eZOGjfl617utfMc:1uoVrZFJZlcH1ZdfQefM
  • TLSH
    T15B77121037F452B3D05597B6E46266F53A327EB62F05811B2543FFEC3A2E3A8293171A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  supdiscoverystealcpersistencespywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1