General
-
Target
99126e270b4b423fa6456f93625910e0aae45ee5cffc9de0c5b75c77587da9eb
-
Size
2.0MB
-
Sample
240526-ez3ekseg6y
-
MD5
921e969ede3c18ad54dfa3f5796940ca
-
SHA1
2c4a4900d0b276a26fb0b0178e3741391827c92e
-
SHA256
99126e270b4b423fa6456f93625910e0aae45ee5cffc9de0c5b75c77587da9eb
-
SHA512
484e8e5572636cd3d9591b87e49dbb68a55c8e9ba3628ec181050942a68b6d373e84462d85c7d614ff033f36a64b5ba1596908a9f09704594c2132e2495053a8
-
SSDEEP
49152:s4K3x1vUSJtTF+TxMoxc1TU+j+dAzGwlrh:s4Ex18StIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
99126e270b4b423fa6456f93625910e0aae45ee5cffc9de0c5b75c77587da9eb.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Extracted
vidar
https://steamcommunity.com/profiles/76561199689717899
https://t.me/copterwin
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
99126e270b4b423fa6456f93625910e0aae45ee5cffc9de0c5b75c77587da9eb
-
Size
2.0MB
-
MD5
921e969ede3c18ad54dfa3f5796940ca
-
SHA1
2c4a4900d0b276a26fb0b0178e3741391827c92e
-
SHA256
99126e270b4b423fa6456f93625910e0aae45ee5cffc9de0c5b75c77587da9eb
-
SHA512
484e8e5572636cd3d9591b87e49dbb68a55c8e9ba3628ec181050942a68b6d373e84462d85c7d614ff033f36a64b5ba1596908a9f09704594c2132e2495053a8
-
SSDEEP
49152:s4K3x1vUSJtTF+TxMoxc1TU+j+dAzGwlrh:s4Ex18StIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-