General
-
Target
74f38a1dfba4bd0276b2dca58e0f17dc8fcdaa35041bff4fe28e25fde2aba57c
-
Size
2.0MB
-
Sample
240523-clklhaab95
-
MD5
ebbc3fd72f69a49616297edae0490c29
-
SHA1
199f3376e922de528d269202b1666ee66e670602
-
SHA256
74f38a1dfba4bd0276b2dca58e0f17dc8fcdaa35041bff4fe28e25fde2aba57c
-
SHA512
7aea2d562c136548bf9fdc80a5521010006776aa5f112b39e464c77abdb958a6b96ce6bb49dd643d552066c767effa3ce3a3be431c6fe3e93f0078df45cc747f
-
SSDEEP
49152:IFno/jfgJtTF+TxMoxc1TU+j+dAzGkiT:IFno/j4tIuoITsdZT
Static task
static1
Behavioral task
behavioral1
Sample
74f38a1dfba4bd0276b2dca58e0f17dc8fcdaa35041bff4fe28e25fde2aba57c.exe
Resource
win7-20231129-en
Malware Config
Extracted
stealc
Targets
-
-
Target
74f38a1dfba4bd0276b2dca58e0f17dc8fcdaa35041bff4fe28e25fde2aba57c
-
Size
2.0MB
-
MD5
ebbc3fd72f69a49616297edae0490c29
-
SHA1
199f3376e922de528d269202b1666ee66e670602
-
SHA256
74f38a1dfba4bd0276b2dca58e0f17dc8fcdaa35041bff4fe28e25fde2aba57c
-
SHA512
7aea2d562c136548bf9fdc80a5521010006776aa5f112b39e464c77abdb958a6b96ce6bb49dd643d552066c767effa3ce3a3be431c6fe3e93f0078df45cc747f
-
SSDEEP
49152:IFno/jfgJtTF+TxMoxc1TU+j+dAzGkiT:IFno/j4tIuoITsdZT
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-