General
-
Target
c4fda86a54d54ca824f28aff3a13e39539dc13938f268dcea7d293235e684183
-
Size
2.1MB
-
Sample
240522-cntbeshc5x
-
MD5
db4ff366df435a94bb66350c32d66c8a
-
SHA1
6e75ab16ea0045d8ee894e6e32c71c22e62e3441
-
SHA256
c4fda86a54d54ca824f28aff3a13e39539dc13938f268dcea7d293235e684183
-
SHA512
1945b7707ae28958b0b1b43d24210dd64001e7be6f91f0ac37f2e356fd1ccf5d070f042cb109d5b2763478723d02baf381173f29bca3b98cb706f24f1cedee86
-
SSDEEP
49152:N6uDuaS9ref+8JtTF+TxMoxc1TU+j+dAzGwlrh:N6uKb978tIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
c4fda86a54d54ca824f28aff3a13e39539dc13938f268dcea7d293235e684183.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
stealc
Targets
-
-
Target
c4fda86a54d54ca824f28aff3a13e39539dc13938f268dcea7d293235e684183
-
Size
2.1MB
-
MD5
db4ff366df435a94bb66350c32d66c8a
-
SHA1
6e75ab16ea0045d8ee894e6e32c71c22e62e3441
-
SHA256
c4fda86a54d54ca824f28aff3a13e39539dc13938f268dcea7d293235e684183
-
SHA512
1945b7707ae28958b0b1b43d24210dd64001e7be6f91f0ac37f2e356fd1ccf5d070f042cb109d5b2763478723d02baf381173f29bca3b98cb706f24f1cedee86
-
SSDEEP
49152:N6uDuaS9ref+8JtTF+TxMoxc1TU+j+dAzGwlrh:N6uKb978tIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-