General
-
Target
f2524afdb9b436bae069fd6bf8922db4d979742e8f9cd6aec918fb5eb24d4edf
-
Size
2.0MB
-
Sample
240526-kqv7ssdf36
-
MD5
aa62593a6f4d6a053922894e654983e3
-
SHA1
e1e6ec3511a2b61dfbdf3bccd7a531a2834cc05e
-
SHA256
f2524afdb9b436bae069fd6bf8922db4d979742e8f9cd6aec918fb5eb24d4edf
-
SHA512
bb16192b859d99dbd259dc4cf7313a25abc0a405f45be8a3aa395c59df1da51af4cf3c986a28aac383d261e3b38fb69551c46dbbe3f0f31fd33385793feeb81f
-
SSDEEP
49152:s4K3x1vUiJtTF+TxMoxc1TU+j+dAzGwlrh:s4Ex18itIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
f2524afdb9b436bae069fd6bf8922db4d979742e8f9cd6aec918fb5eb24d4edf.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Extracted
vidar
https://steamcommunity.com/profiles/76561199689717899
https://t.me/copterwin
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
f2524afdb9b436bae069fd6bf8922db4d979742e8f9cd6aec918fb5eb24d4edf
-
Size
2.0MB
-
MD5
aa62593a6f4d6a053922894e654983e3
-
SHA1
e1e6ec3511a2b61dfbdf3bccd7a531a2834cc05e
-
SHA256
f2524afdb9b436bae069fd6bf8922db4d979742e8f9cd6aec918fb5eb24d4edf
-
SHA512
bb16192b859d99dbd259dc4cf7313a25abc0a405f45be8a3aa395c59df1da51af4cf3c986a28aac383d261e3b38fb69551c46dbbe3f0f31fd33385793feeb81f
-
SSDEEP
49152:s4K3x1vUiJtTF+TxMoxc1TU+j+dAzGwlrh:s4Ex18itIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-