General
-
Target
information.exe
-
Size
11.3MB
-
Sample
231201-jg6rhaga6z
-
MD5
98a0bf4af1e1e9a69bddee4421e1772d
-
SHA1
38c9160650423557c000b624dc5764c7e593b6e2
-
SHA256
34318cdef0cad69ba0ba6f68b42fdd5c581abdbc4feceeab73bc13c56840e7fa
-
SHA512
57e5311bc68b22f59029129ed8a11b6e604e908eba60bc4548604011eee2465ffee5748157d78377c796bb6a2e019cd9018f84f4fc610a45255ee4729f1797dc
-
SSDEEP
196608:Z0OHLe9/L+y5ugST2ZHZIXt/D7awIyOmAJuA4PZPc2iVXLy0LY7tvRo:K39/Cy5ugPnIFb37AJ+Nc2ikQGo
Static task
static1
Behavioral task
behavioral1
Sample
information.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
information.exe
Resource
win10v2004-20231127-en
Malware Config
Extracted
vidar
6.5
ff0f5173b378c3dde7c3c6e3ae14c3a6
https://t.me/starcofeeth
https://steamcommunity.com/profiles/76561199571056594
-
profile_id_v2
ff0f5173b378c3dde7c3c6e3ae14c3a6
-
user_agent
Mozilla/5.0 (X11; CrOS x86_64 15329.59.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36
Targets
-
-
Target
information.exe
-
Size
11.3MB
-
MD5
98a0bf4af1e1e9a69bddee4421e1772d
-
SHA1
38c9160650423557c000b624dc5764c7e593b6e2
-
SHA256
34318cdef0cad69ba0ba6f68b42fdd5c581abdbc4feceeab73bc13c56840e7fa
-
SHA512
57e5311bc68b22f59029129ed8a11b6e604e908eba60bc4548604011eee2465ffee5748157d78377c796bb6a2e019cd9018f84f4fc610a45255ee4729f1797dc
-
SSDEEP
196608:Z0OHLe9/L+y5ugST2ZHZIXt/D7awIyOmAJuA4PZPc2iVXLy0LY7tvRo:K39/Cy5ugPnIFb37AJ+Nc2ikQGo
-
Deletes itself
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-