General
-
Target
b32baa1d4898fab7345bddc0338b30819eaa40a7900fcfc43270f6a587f57670
-
Size
2.0MB
-
Sample
240524-ye6faagg6v
-
MD5
c3ca1da82247dce64ec69d91a76e1b88
-
SHA1
c429c13c5dec752e86d13fa8991cd32a148239d0
-
SHA256
b32baa1d4898fab7345bddc0338b30819eaa40a7900fcfc43270f6a587f57670
-
SHA512
dd28f5a5175c1ed10508cbadebe5eff39e91f2903d24fa7a74841895ce4826c82cbe8b6e80f8f326b6f6131ef40845f472b4f9d267aa7a78564630641ab50d9f
-
SSDEEP
49152:s4K3x1vUCJtTF+TxMoxc1TU+j+dAzGwlrh:s4Ex18CtIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
b32baa1d4898fab7345bddc0338b30819eaa40a7900fcfc43270f6a587f57670.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
stealc
Extracted
vidar
https://steamcommunity.com/profiles/76561199689717899
https://t.me/copterwin
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
b32baa1d4898fab7345bddc0338b30819eaa40a7900fcfc43270f6a587f57670
-
Size
2.0MB
-
MD5
c3ca1da82247dce64ec69d91a76e1b88
-
SHA1
c429c13c5dec752e86d13fa8991cd32a148239d0
-
SHA256
b32baa1d4898fab7345bddc0338b30819eaa40a7900fcfc43270f6a587f57670
-
SHA512
dd28f5a5175c1ed10508cbadebe5eff39e91f2903d24fa7a74841895ce4826c82cbe8b6e80f8f326b6f6131ef40845f472b4f9d267aa7a78564630641ab50d9f
-
SSDEEP
49152:s4K3x1vUCJtTF+TxMoxc1TU+j+dAzGwlrh:s4Ex18CtIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-