General
-
Target
f74fbb50e4024341cec024c21ce9bb22ae5caf31b9cefdf1cc2e5703e477611b
-
Size
296KB
-
Sample
230106-gzzpssed59
-
MD5
e808b25afecc174f4229e473456e163c
-
SHA1
9199f211053edff7f590ddd935eb4da6190f8507
-
SHA256
f74fbb50e4024341cec024c21ce9bb22ae5caf31b9cefdf1cc2e5703e477611b
-
SHA512
49382b7b3570f4733ef3fbf9f25dc9ff53ee33cbaa91629883876d31335ae42ef357200e3a15628a98275879aa999739919f5b4e047ca63bd3ca23598fc22edb
-
SSDEEP
6144:17pON8pLwfct+KUGCvGJlcWwoKwL4YnUoWtq:1RpgKNgWw5wcY
Behavioral task
behavioral1
Sample
f74fbb50e4024341cec024c21ce9bb22ae5caf31b9cefdf1cc2e5703e477611b.exe
Resource
win7-20220901-en
Malware Config
Extracted
vidar
1.8
24
https://t.me/year2023start
https://steamcommunity.com/profiles/76561199467421923
-
profile_id
24
Targets
-
-
Target
f74fbb50e4024341cec024c21ce9bb22ae5caf31b9cefdf1cc2e5703e477611b
-
Size
296KB
-
MD5
e808b25afecc174f4229e473456e163c
-
SHA1
9199f211053edff7f590ddd935eb4da6190f8507
-
SHA256
f74fbb50e4024341cec024c21ce9bb22ae5caf31b9cefdf1cc2e5703e477611b
-
SHA512
49382b7b3570f4733ef3fbf9f25dc9ff53ee33cbaa91629883876d31335ae42ef357200e3a15628a98275879aa999739919f5b4e047ca63bd3ca23598fc22edb
-
SSDEEP
6144:17pON8pLwfct+KUGCvGJlcWwoKwL4YnUoWtq:1RpgKNgWw5wcY
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-