General
-
Target
a8e37aea3413fb9403e3690b2f1c4edc10b9685de8fda68254c930134e2b2f0f
-
Size
389KB
-
Sample
220725-vdb89sbaen
-
MD5
c6d1b079aa26df3bb9309a9e62349b06
-
SHA1
10569121fcee6033e6b75e855b70ac7903e64ecd
-
SHA256
a8e37aea3413fb9403e3690b2f1c4edc10b9685de8fda68254c930134e2b2f0f
-
SHA512
4ae01f8aec7ac5d55ccf0113b418f75d889211ab2083d6659f929f14cf54cc5271abffdc21c06e9caae5453628dac7edb95c2d7e564e92aeab3ea799d40db881
Static task
static1
Malware Config
Extracted
vidar
53.3
517
https://climatejustice.social/@ffoleg94
-
profile_id
517
Targets
-
-
Target
a8e37aea3413fb9403e3690b2f1c4edc10b9685de8fda68254c930134e2b2f0f
-
Size
389KB
-
MD5
c6d1b079aa26df3bb9309a9e62349b06
-
SHA1
10569121fcee6033e6b75e855b70ac7903e64ecd
-
SHA256
a8e37aea3413fb9403e3690b2f1c4edc10b9685de8fda68254c930134e2b2f0f
-
SHA512
4ae01f8aec7ac5d55ccf0113b418f75d889211ab2083d6659f929f14cf54cc5271abffdc21c06e9caae5453628dac7edb95c2d7e564e92aeab3ea799d40db881
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-