General
-
Target
43f452e3c2f65ade397c970bb8b3e520a04b4da7f9750c8a22d1835abbf462fd
-
Size
1.8MB
-
Sample
240523-lv3ywacd63
-
MD5
3fe2e10e77be2fdb1e5dc41680482311
-
SHA1
b02a642052ff1d132c63e37b48aa02889ee4223a
-
SHA256
43f452e3c2f65ade397c970bb8b3e520a04b4da7f9750c8a22d1835abbf462fd
-
SHA512
0184f6762301305053e289403aa87f5b762c2737e68efcadac988724c4e29fef64d9eb147be569576f8b5ed42432854bc706232d2d3efd0f6928f15ec53987bc
-
SSDEEP
24576:FBfuZfeq6slO6hTdtTF+TxMoxQH1Tj4wtjYZH1DmoYYzi3WH45yv+OueSJhm9e:F7qF3JtTF+TxMoxc1TU+j+dAzGwlrh
Static task
static1
Behavioral task
behavioral1
Sample
43f452e3c2f65ade397c970bb8b3e520a04b4da7f9750c8a22d1835abbf462fd.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Targets
-
-
Target
43f452e3c2f65ade397c970bb8b3e520a04b4da7f9750c8a22d1835abbf462fd
-
Size
1.8MB
-
MD5
3fe2e10e77be2fdb1e5dc41680482311
-
SHA1
b02a642052ff1d132c63e37b48aa02889ee4223a
-
SHA256
43f452e3c2f65ade397c970bb8b3e520a04b4da7f9750c8a22d1835abbf462fd
-
SHA512
0184f6762301305053e289403aa87f5b762c2737e68efcadac988724c4e29fef64d9eb147be569576f8b5ed42432854bc706232d2d3efd0f6928f15ec53987bc
-
SSDEEP
24576:FBfuZfeq6slO6hTdtTF+TxMoxQH1Tj4wtjYZH1DmoYYzi3WH45yv+OueSJhm9e:F7qF3JtTF+TxMoxc1TU+j+dAzGwlrh
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-