Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb220d172fe9238bcd867c8a80259402be56d7e8249539f60db0a1f21c8f1886

  • Size

    2.4MB

  • Sample

    240523-plr2sshc8t

  • MD5

    8abf6048a2772227d534f9f6e54f9410

  • SHA1

    b173a12c290c37751a2ea4a83bbf7afa35215b69

  • SHA256

    fb220d172fe9238bcd867c8a80259402be56d7e8249539f60db0a1f21c8f1886

  • SHA512

    c24a629df1341d15776670a038995d35d4c9fc25a1768e2253dcdaee61d79fffaa31b0c138fa1b9c8c801796cab635c92c9c6ef5a30365b50757b8b56e3b69d0

  • SSDEEP

    49152:jxIRJF1HL+VdX68kUKJtTF+TxMoxc1TU+j+dAzGwlrh:jEJF16dX68dKtIuoITsdZ

Score
10/10
stealcvidardiscoveryspywarestealer

Malware Config

Extracted

Family

stealc

rc4.plain

Targets

    • Target

      fb220d172fe9238bcd867c8a80259402be56d7e8249539f60db0a1f21c8f1886

    • Size

      2.4MB

    • MD5

      8abf6048a2772227d534f9f6e54f9410

    • SHA1

      b173a12c290c37751a2ea4a83bbf7afa35215b69

    • SHA256

      fb220d172fe9238bcd867c8a80259402be56d7e8249539f60db0a1f21c8f1886

    • SHA512

      c24a629df1341d15776670a038995d35d4c9fc25a1768e2253dcdaee61d79fffaa31b0c138fa1b9c8c801796cab635c92c9c6ef5a30365b50757b8b56e3b69d0

    • SSDEEP

      49152:jxIRJF1HL+VdX68kUKJtTF+TxMoxc1TU+j+dAzGwlrh:jEJF16dX68dKtIuoITsdZ

    Score
    10/10
    stealcvidardiscoveryspywarestealer

    • Detect Vidar Stealer

      stealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks