Extracted

• • Target
    file.exe
  • Size 210KB
  • SHA256 6a14002ccd42f720001b28a0efff201c6d35dbed90d71b6a546c337df6ae0d5f
  • MD5 f553ab409bd3bb412c80bb7dc97d967c
  • SHA1 0af33064e260f9aa3932f143f934b309f93fa6c4
  • SHA512 07863bcc1a12eec7f4f209c4749779d26f98de2e9071d11840c8ec0bf3ffa28d4c8d183b4103c89ef640e607f686284035998f3ec4d0a605d99b8362856f21db
  • SSDEEP 3072:+uyHLuNfop5c7QRoEPf/Mo/uBB/7mjdlXjc2f7fh11594qPM0Hx:JSLuNop5lo0f/hf97fzJ4qE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  stealc8268873659707098636355379426discoveryspywarestealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2