Overview

overview

10

Static

static

3

SecuriteIn...50.exe

windows7-x64

10

SecuriteIn...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Win32.PWSX-gen.22336.13850.exe

  • Size

    253KB

  • Sample

    240409-qt4k8sgc56

  • MD5

    9c62b2cace38bbed4e624bbd2d36ef42

  • SHA1

    d2a023ed67b4fb0e77e54ea835f1cec763e03e48

  • SHA256

    08c1d7fdcdebaa5fe76dd7c18d96ba32ee6577a43f3d4ed68d0b360531980f8c

  • SHA512

    79bd7c8ee9815ed5bf49737b6e260f989ba75f62d54171b038b6b4acbe8b043b6d0ea82877dd59aba7901e017293dd605d2af9b771d4b6ba375a9966bead81ea

  • SSDEEP

    6144:wnvS4O81rXwZ6+FHuDcudzEZlOt1hgpA8yaiT:YXxbO6+FHuFelOWHtiT

Score
10/10
stealcvidarstealer

Malware Config

Targets

    • Target

      SecuriteInfo.com.Win32.PWSX-gen.22336.13850.exe

    • Size

      253KB

    • MD5

      9c62b2cace38bbed4e624bbd2d36ef42

    • SHA1

      d2a023ed67b4fb0e77e54ea835f1cec763e03e48

    • SHA256

      08c1d7fdcdebaa5fe76dd7c18d96ba32ee6577a43f3d4ed68d0b360531980f8c

    • SHA512

      79bd7c8ee9815ed5bf49737b6e260f989ba75f62d54171b038b6b4acbe8b043b6d0ea82877dd59aba7901e017293dd605d2af9b771d4b6ba375a9966bead81ea

    • SSDEEP

      6144:wnvS4O81rXwZ6+FHuDcudzEZlOt1hgpA8yaiT:YXxbO6+FHuFelOWHtiT

    Score
    10/10
    stealcvidarstealer

    • Detect Vidar Stealer

      stealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks