General
-
Target
968d13e646fa7f7ecafed9f9ef5de5de00d4ba4b296ca4fd0efa96222e0e160d
-
Size
2.0MB
-
Sample
240526-zcyhbscb82
-
MD5
582d39e7b8e399313072480d54890ca8
-
SHA1
fa4f0f0396207e3551d0e0ff07ee80d41ce12beb
-
SHA256
968d13e646fa7f7ecafed9f9ef5de5de00d4ba4b296ca4fd0efa96222e0e160d
-
SHA512
a3d066ae1cadab93e616ae1b2e4b223a51fa0d21b131440a19b4cb94568f61f8629576e94cc4d46b512ff09ad923ef34d9431470a114f89a96faac62fc00bf31
-
SSDEEP
49152:OePpQE1JtTF+TxMoxc1TU+j+dAzGwlrh:OePpQE1tIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
968d13e646fa7f7ecafed9f9ef5de5de00d4ba4b296ca4fd0efa96222e0e160d.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Extracted
vidar
https://steamcommunity.com/profiles/76561199689717899
https://t.me/copterwin
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
968d13e646fa7f7ecafed9f9ef5de5de00d4ba4b296ca4fd0efa96222e0e160d
-
Size
2.0MB
-
MD5
582d39e7b8e399313072480d54890ca8
-
SHA1
fa4f0f0396207e3551d0e0ff07ee80d41ce12beb
-
SHA256
968d13e646fa7f7ecafed9f9ef5de5de00d4ba4b296ca4fd0efa96222e0e160d
-
SHA512
a3d066ae1cadab93e616ae1b2e4b223a51fa0d21b131440a19b4cb94568f61f8629576e94cc4d46b512ff09ad923ef34d9431470a114f89a96faac62fc00bf31
-
SSDEEP
49152:OePpQE1JtTF+TxMoxc1TU+j+dAzGwlrh:OePpQE1tIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-