General
-
Target
file
-
Size
325KB
-
Sample
221114-zrrckadf26
-
MD5
91dcf98a1a0b188cbce61dc0b02af908
-
SHA1
44dc2cd9ffd68e66309e03297aeac6e07a102e2c
-
SHA256
a07bcdd42890c8ceba1f103dd382f977f326f646b9361528ce6eb89cbbeabce5
-
SHA512
3c7ac8138ad9a7b6123dcd6adfa5c8986740c7bbc2d7c89abdf928f05b12c9c8b05939a84a07f71aff595659b3266bb3f730e49b6aa29267d3dcc6c2072a11cb
-
SSDEEP
6144:ylF/Ld/H3e07VGl8SA1p5/DNlSnhNoxI5YTsP4Ha:ylZp/H3RcrAHdEmG5OP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
Malware Config
Extracted
vidar
55.7
937
https://t.me/deadftx
https://www.ultimate-guitar.com/u/smbfupkuhrgc1
-
profile_id
937
Targets
-
-
Target
file
-
Size
325KB
-
MD5
91dcf98a1a0b188cbce61dc0b02af908
-
SHA1
44dc2cd9ffd68e66309e03297aeac6e07a102e2c
-
SHA256
a07bcdd42890c8ceba1f103dd382f977f326f646b9361528ce6eb89cbbeabce5
-
SHA512
3c7ac8138ad9a7b6123dcd6adfa5c8986740c7bbc2d7c89abdf928f05b12c9c8b05939a84a07f71aff595659b3266bb3f730e49b6aa29267d3dcc6c2072a11cb
-
SSDEEP
6144:ylF/Ld/H3e07VGl8SA1p5/DNlSnhNoxI5YTsP4Ha:ylZp/H3RcrAHdEmG5OP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-