General
-
Target
7fc3ea566a6d5bc8e00e83a0cf96f49372612b600986543a0646c8578a2f782f
-
Size
3.6MB
-
Sample
240524-r8qhlaaa83
-
MD5
3ccf2ae7c700765b7baee5fcc754d3ed
-
SHA1
e4171e502eef538896e0a1b28ac08beb360e9bfe
-
SHA256
7fc3ea566a6d5bc8e00e83a0cf96f49372612b600986543a0646c8578a2f782f
-
SHA512
ed7e85b09d72761e99b4c57abc7f2648fecff7d6d6bdb59479be8f942078c1113b36a232889c25e0740eba7c4ec4247f1e5f58c7747a97be85bad91f66f9043b
-
SSDEEP
98304:e6hmT+WPOBzN3FjxhQwA5hjjHNiicU+s3C76L/:e6h9IOBznjgwA5hjjHGN6z
Static task
static1
Behavioral task
behavioral1
Sample
7fc3ea566a6d5bc8e00e83a0cf96f49372612b600986543a0646c8578a2f782f.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
7fc3ea566a6d5bc8e00e83a0cf96f49372612b600986543a0646c8578a2f782f
-
Size
3.6MB
-
MD5
3ccf2ae7c700765b7baee5fcc754d3ed
-
SHA1
e4171e502eef538896e0a1b28ac08beb360e9bfe
-
SHA256
7fc3ea566a6d5bc8e00e83a0cf96f49372612b600986543a0646c8578a2f782f
-
SHA512
ed7e85b09d72761e99b4c57abc7f2648fecff7d6d6bdb59479be8f942078c1113b36a232889c25e0740eba7c4ec4247f1e5f58c7747a97be85bad91f66f9043b
-
SSDEEP
98304:e6hmT+WPOBzN3FjxhQwA5hjjHNiicU+s3C76L/:e6h9IOBznjgwA5hjjHGN6z
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-