General
-
Target
2582fab2adc3e880f3baa8fe8076ee9e97ff16cb65c099c70cca57fd629aa3c2
-
Size
3.3MB
-
Sample
220928-w4r8vahhep
-
MD5
c547a401825f053bcd52d9941d1ac2ca
-
SHA1
3ea898094f5ab55de42a528c3a82aacfd7f5c169
-
SHA256
2582fab2adc3e880f3baa8fe8076ee9e97ff16cb65c099c70cca57fd629aa3c2
-
SHA512
3ef4cd153dc604a2d3af90c818b172ffdfd29124215e01e1147b96f02b196f00803343151c793525f06b336433c3e9c2c0796a96f8bbce4b901489b292aedfbe
-
SSDEEP
12288:rkU2jxxsm3+AzExa67IVAgQd15KkprIYv:gU5m3HExadygAbpfv
Static task
static1
Malware Config
Extracted
vidar
54.6
1680
https://t.me/huobiinside
https://mas.to/@kyriazhs1975
-
profile_id
1680
Targets
-
-
Target
2582fab2adc3e880f3baa8fe8076ee9e97ff16cb65c099c70cca57fd629aa3c2
-
Size
3.3MB
-
MD5
c547a401825f053bcd52d9941d1ac2ca
-
SHA1
3ea898094f5ab55de42a528c3a82aacfd7f5c169
-
SHA256
2582fab2adc3e880f3baa8fe8076ee9e97ff16cb65c099c70cca57fd629aa3c2
-
SHA512
3ef4cd153dc604a2d3af90c818b172ffdfd29124215e01e1147b96f02b196f00803343151c793525f06b336433c3e9c2c0796a96f8bbce4b901489b292aedfbe
-
SSDEEP
12288:rkU2jxxsm3+AzExa67IVAgQd15KkprIYv:gU5m3HExadygAbpfv
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-