General
-
Target
72394358309fcb03e91ec8cc913fea4cce827ef07285bab654cac3c74a325246.exe
-
Size
2.0MB
-
Sample
240522-xr23ysdb59
-
MD5
5faf666b3bca47725bf0d7fdd49a6f79
-
SHA1
b8e2465ced83235c72e0d2b0d74174f689f27b6f
-
SHA256
72394358309fcb03e91ec8cc913fea4cce827ef07285bab654cac3c74a325246
-
SHA512
08c94244daad9a269528d20f02ed7db98e7003c74d74c4882eadef73b4202363d3e715ac36ba1c1f0fe8e9a3f6476da5e7c7955b4a6b13cbd647125abe00885d
-
SSDEEP
49152:7QzHt472DUJtTF+TxMoxc1TU+j+dAzGwlrh:7QzHtKtIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
72394358309fcb03e91ec8cc913fea4cce827ef07285bab654cac3c74a325246.exe
Resource
win7-20240221-en
Malware Config
Extracted
stealc
Targets
-
-
Target
72394358309fcb03e91ec8cc913fea4cce827ef07285bab654cac3c74a325246.exe
-
Size
2.0MB
-
MD5
5faf666b3bca47725bf0d7fdd49a6f79
-
SHA1
b8e2465ced83235c72e0d2b0d74174f689f27b6f
-
SHA256
72394358309fcb03e91ec8cc913fea4cce827ef07285bab654cac3c74a325246
-
SHA512
08c94244daad9a269528d20f02ed7db98e7003c74d74c4882eadef73b4202363d3e715ac36ba1c1f0fe8e9a3f6476da5e7c7955b4a6b13cbd647125abe00885d
-
SSDEEP
49152:7QzHt472DUJtTF+TxMoxc1TU+j+dAzGwlrh:7QzHtKtIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-