General
-
Target
ecd236efba05d87136537869ef609d2cf029d49c8206df867420355264f0cb93
-
Size
1.8MB
-
Sample
240523-fq9mzaef8t
-
MD5
f07abc2a24262b16698fd0befd7cb3ff
-
SHA1
842882d6a0bd55fa7dd98cbf1ea3c6ce6170fa4c
-
SHA256
ecd236efba05d87136537869ef609d2cf029d49c8206df867420355264f0cb93
-
SHA512
b46a8c548664875076bf0b245ed47338a91971aa52b113cc9cc6cb906d06922d44d7b420fde90975d997eb3edac5ea1da6aac5e7fb90a9ab9d1d69e82f7a152b
-
SSDEEP
24576:FBfuZfeq6s9O6hTdtTF+TxMoxQH1Tj4wtjYZH1DmoYYzi3WH45yv+OueSJhm9e:F7qFvJtTF+TxMoxc1TU+j+dAzGwlrh
Static task
static1
Behavioral task
behavioral1
Sample
ecd236efba05d87136537869ef609d2cf029d49c8206df867420355264f0cb93.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Targets
-
-
Target
ecd236efba05d87136537869ef609d2cf029d49c8206df867420355264f0cb93
-
Size
1.8MB
-
MD5
f07abc2a24262b16698fd0befd7cb3ff
-
SHA1
842882d6a0bd55fa7dd98cbf1ea3c6ce6170fa4c
-
SHA256
ecd236efba05d87136537869ef609d2cf029d49c8206df867420355264f0cb93
-
SHA512
b46a8c548664875076bf0b245ed47338a91971aa52b113cc9cc6cb906d06922d44d7b420fde90975d997eb3edac5ea1da6aac5e7fb90a9ab9d1d69e82f7a152b
-
SSDEEP
24576:FBfuZfeq6s9O6hTdtTF+TxMoxQH1Tj4wtjYZH1DmoYYzi3WH45yv+OueSJhm9e:F7qFvJtTF+TxMoxc1TU+j+dAzGwlrh
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-