General
-
Target
48b7fa79c0b3d3467e07d9460ba276b027a5a03ee33aed8525b4599aefc45a27
-
Size
1.8MB
-
Sample
240523-gdbe3sfd9s
-
MD5
963c4905ceb9a92c20487ff7f65395fa
-
SHA1
07d4daef301cd66f05bc4bf8845deb19cf002046
-
SHA256
48b7fa79c0b3d3467e07d9460ba276b027a5a03ee33aed8525b4599aefc45a27
-
SHA512
4c00251df9849bd82d1b0279192a3d2b52538fb4bd58f9d8b6deedd98261338fd0fdb2998863962b90c02a61f01d07357112fc73b18961a9208ae30b1631b3fb
-
SSDEEP
24576:FBfuZfeq6stO6hTdtTF+TxMoxQH1Tj4wtjYZH1DmoYYzi3WH45yv+OueSJhm9e:F7qF/JtTF+TxMoxc1TU+j+dAzGwlrh
Static task
static1
Behavioral task
behavioral1
Sample
48b7fa79c0b3d3467e07d9460ba276b027a5a03ee33aed8525b4599aefc45a27.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Targets
-
-
Target
48b7fa79c0b3d3467e07d9460ba276b027a5a03ee33aed8525b4599aefc45a27
-
Size
1.8MB
-
MD5
963c4905ceb9a92c20487ff7f65395fa
-
SHA1
07d4daef301cd66f05bc4bf8845deb19cf002046
-
SHA256
48b7fa79c0b3d3467e07d9460ba276b027a5a03ee33aed8525b4599aefc45a27
-
SHA512
4c00251df9849bd82d1b0279192a3d2b52538fb4bd58f9d8b6deedd98261338fd0fdb2998863962b90c02a61f01d07357112fc73b18961a9208ae30b1631b3fb
-
SSDEEP
24576:FBfuZfeq6stO6hTdtTF+TxMoxQH1Tj4wtjYZH1DmoYYzi3WH45yv+OueSJhm9e:F7qF/JtTF+TxMoxc1TU+j+dAzGwlrh
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-