General
-
Target
fa04be0dda0d438e6af625d01c9fe0d6c87e0fb2e84546a9f4f8f52a86c3f80b
-
Size
2.0MB
-
Sample
240526-rj5afshb4w
-
MD5
729d4e5a1a2b87dec4c0826b19ae26d9
-
SHA1
f4a8ee102aec4d8da680bdb33ee05668e553ba36
-
SHA256
fa04be0dda0d438e6af625d01c9fe0d6c87e0fb2e84546a9f4f8f52a86c3f80b
-
SHA512
9af4d48f794bce1ec3b3f705fb66daf2b0fcb47a6693b1aa332af9b04588912a0d2656973e51fcbfa34517bbaaae89061ed680d0f4acf254317e96df68075aa8
-
SSDEEP
49152:OePpQEZJtTF+TxMoxc1TU+j+dAzGwlrh:OePpQEZtIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
fa04be0dda0d438e6af625d01c9fe0d6c87e0fb2e84546a9f4f8f52a86c3f80b.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Extracted
vidar
https://steamcommunity.com/profiles/76561199689717899
https://t.me/copterwin
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
fa04be0dda0d438e6af625d01c9fe0d6c87e0fb2e84546a9f4f8f52a86c3f80b
-
Size
2.0MB
-
MD5
729d4e5a1a2b87dec4c0826b19ae26d9
-
SHA1
f4a8ee102aec4d8da680bdb33ee05668e553ba36
-
SHA256
fa04be0dda0d438e6af625d01c9fe0d6c87e0fb2e84546a9f4f8f52a86c3f80b
-
SHA512
9af4d48f794bce1ec3b3f705fb66daf2b0fcb47a6693b1aa332af9b04588912a0d2656973e51fcbfa34517bbaaae89061ed680d0f4acf254317e96df68075aa8
-
SSDEEP
49152:OePpQEZJtTF+TxMoxc1TU+j+dAzGwlrh:OePpQEZtIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-