General
-
Target
aa3d35423b3c38b00a5e2605fd03ebe14875681cba051b7dc6628b4b83ea1327
-
Size
2.0MB
-
Sample
240525-pxz7jsbh8y
-
MD5
a3b759d59d7a1a2e0a83f151f6ba1420
-
SHA1
2ee0f1ecfdb3b6a90784931f99245fa1e6b17114
-
SHA256
aa3d35423b3c38b00a5e2605fd03ebe14875681cba051b7dc6628b4b83ea1327
-
SHA512
d539143d3f75df542831efd5f10e0963757422f91ab94811981b29c57a80154fb2c8fd7744e7373d4e805459b1a2983b5e0245682bf1848ffeb0e68747cacefb
-
SSDEEP
49152:s4K3x1vUKJtTF+TxMoxc1TU+j+dAzGwlrh:s4Ex18KtIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
aa3d35423b3c38b00a5e2605fd03ebe14875681cba051b7dc6628b4b83ea1327.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
stealc
Extracted
vidar
https://steamcommunity.com/profiles/76561199689717899
https://t.me/copterwin
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
aa3d35423b3c38b00a5e2605fd03ebe14875681cba051b7dc6628b4b83ea1327
-
Size
2.0MB
-
MD5
a3b759d59d7a1a2e0a83f151f6ba1420
-
SHA1
2ee0f1ecfdb3b6a90784931f99245fa1e6b17114
-
SHA256
aa3d35423b3c38b00a5e2605fd03ebe14875681cba051b7dc6628b4b83ea1327
-
SHA512
d539143d3f75df542831efd5f10e0963757422f91ab94811981b29c57a80154fb2c8fd7744e7373d4e805459b1a2983b5e0245682bf1848ffeb0e68747cacefb
-
SSDEEP
49152:s4K3x1vUKJtTF+TxMoxc1TU+j+dAzGwlrh:s4Ex18KtIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-