Overview

overview

10

Static

static

10

112fdf98ed...c8.exe

windows7-x64

3

112fdf98ed...c8.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    112fdf98ed3604a9d8728e145d43ae5c51833d25ae6c953d87e994ccdc9659c8.exe

  • Size

    2.3MB

  • Sample

    240526-c3hs8sbg91

  • MD5

    ea68f8588a77f61a69b16ac47e6ca65d

  • SHA1

    3889023d693e4b5ba48a2a0b4b1869392e7ac77c

  • SHA256

    112fdf98ed3604a9d8728e145d43ae5c51833d25ae6c953d87e994ccdc9659c8

  • SHA512

    6f23de16e0d10a0d622139818fac0eb0f97dccf49e5338f436310df2776d091c05977f8847d1f39b4a0cc6847832ff98491836883a27410704bce98aba9a277b

  • SSDEEP

    3072:xf8nGHElvZZT+4qXcHvuefUbgtvfYtgJyrjCBUvJ78LtWh78LtWs78LtWCmeF0gq:R8nFlvCxBX2XYKwjUAyfTNN

Score
10/10
stealcvidarstealer

Malware Config

Extracted

Family

stealc

rc4.plain

Extracted

Family

vidar

C2

https://steamcommunity.com/profiles/76561199689717899

https://t.me/copterwin
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0

Targets

    • Target

      112fdf98ed3604a9d8728e145d43ae5c51833d25ae6c953d87e994ccdc9659c8.exe

    • Size

      2.3MB

    • MD5

      ea68f8588a77f61a69b16ac47e6ca65d

    • SHA1

      3889023d693e4b5ba48a2a0b4b1869392e7ac77c

    • SHA256

      112fdf98ed3604a9d8728e145d43ae5c51833d25ae6c953d87e994ccdc9659c8

    • SHA512

      6f23de16e0d10a0d622139818fac0eb0f97dccf49e5338f436310df2776d091c05977f8847d1f39b4a0cc6847832ff98491836883a27410704bce98aba9a277b

    • SSDEEP

      3072:xf8nGHElvZZT+4qXcHvuefUbgtvfYtgJyrjCBUvJ78LtWh78LtWs78LtWCmeF0gq:R8nFlvCxBX2XYKwjUAyfTNN

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks