General
-
Target
1acf7c7e3a0d489ff7f2781be4343e3c4ab2a547c033ebf723c2c45ae8eec611
-
Size
2.0MB
-
Sample
240526-gf7lashg62
-
MD5
48c0006e7404ef17ed528ffe20ee101d
-
SHA1
a3572b5c66ee4b3088d88125454bfa6a4882e39a
-
SHA256
1acf7c7e3a0d489ff7f2781be4343e3c4ab2a547c033ebf723c2c45ae8eec611
-
SHA512
b4883765f886a70cfd1085bdde52e33a91fb34cacb58758cd9fda4812df856f44f3a1c8848dadb53cacd1ac073e894ca901eccfdb7584f29da981edab1809662
-
SSDEEP
49152:s4K3x1vU6JtTF+TxMoxc1TU+j+dAzGwlrh:s4Ex186tIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
1acf7c7e3a0d489ff7f2781be4343e3c4ab2a547c033ebf723c2c45ae8eec611.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Extracted
vidar
https://steamcommunity.com/profiles/76561199689717899
https://t.me/copterwin
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
1acf7c7e3a0d489ff7f2781be4343e3c4ab2a547c033ebf723c2c45ae8eec611
-
Size
2.0MB
-
MD5
48c0006e7404ef17ed528ffe20ee101d
-
SHA1
a3572b5c66ee4b3088d88125454bfa6a4882e39a
-
SHA256
1acf7c7e3a0d489ff7f2781be4343e3c4ab2a547c033ebf723c2c45ae8eec611
-
SHA512
b4883765f886a70cfd1085bdde52e33a91fb34cacb58758cd9fda4812df856f44f3a1c8848dadb53cacd1ac073e894ca901eccfdb7584f29da981edab1809662
-
SSDEEP
49152:s4K3x1vU6JtTF+TxMoxc1TU+j+dAzGwlrh:s4Ex186tIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-