General
-
Target
8a6fcbbaeba40a7708df130f0537981cf3e5a0e812afcb3ebc46a319d3abe0ae
-
Size
1.8MB
-
Sample
240523-hdyq2sge6t
-
MD5
12f7cf374e153af525a37e7157e11c10
-
SHA1
3231c4dc99f5d72ec6c0fc4af94e47384ddda8d3
-
SHA256
8a6fcbbaeba40a7708df130f0537981cf3e5a0e812afcb3ebc46a319d3abe0ae
-
SHA512
f3a48045330be8ac9b3b5e591d4037de4401463840df33a75bd30f6ce39d9f86f4ec691a97241efc01edf54ccd2db0983319f390a614efab76bace8941f0b01e
-
SSDEEP
24576:FBfuZfeq6sxO6hTdtTF+TxMoxQH1Tj4wtjYZH1DmoYYzi3WH45yv+OueSJhm9e:F7qFbJtTF+TxMoxc1TU+j+dAzGwlrh
Static task
static1
Behavioral task
behavioral1
Sample
8a6fcbbaeba40a7708df130f0537981cf3e5a0e812afcb3ebc46a319d3abe0ae.exe
Resource
win7-20240508-en
Malware Config
Extracted
stealc
Targets
-
-
Target
8a6fcbbaeba40a7708df130f0537981cf3e5a0e812afcb3ebc46a319d3abe0ae
-
Size
1.8MB
-
MD5
12f7cf374e153af525a37e7157e11c10
-
SHA1
3231c4dc99f5d72ec6c0fc4af94e47384ddda8d3
-
SHA256
8a6fcbbaeba40a7708df130f0537981cf3e5a0e812afcb3ebc46a319d3abe0ae
-
SHA512
f3a48045330be8ac9b3b5e591d4037de4401463840df33a75bd30f6ce39d9f86f4ec691a97241efc01edf54ccd2db0983319f390a614efab76bace8941f0b01e
-
SSDEEP
24576:FBfuZfeq6sxO6hTdtTF+TxMoxQH1Tj4wtjYZH1DmoYYzi3WH45yv+OueSJhm9e:F7qFbJtTF+TxMoxc1TU+j+dAzGwlrh
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-