General
-
Target
ccb16e8c5f69d661dcd3387865ae2010b9c6e11d299daddb9576be47b69ba0eb
-
Size
2.0MB
-
Sample
240527-hjhl1scc77
-
MD5
88c2b57e80427e0be28062be3ff9f8b9
-
SHA1
141c8705a0b86b33ae797f281f279a7bd36be054
-
SHA256
ccb16e8c5f69d661dcd3387865ae2010b9c6e11d299daddb9576be47b69ba0eb
-
SHA512
6738f7d80bb812ad501816f5937185a91c53b4bb1ed08b9e7fe1aea62ba3e282feb0ac61a7dfcfe0b9befa4a9d535d229a7b48b86baef046b99f0049b6c73f00
-
SSDEEP
49152:OePpQE5JtTF+TxMoxc1TU+j+dAzGwlrh:OePpQE5tIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
ccb16e8c5f69d661dcd3387865ae2010b9c6e11d299daddb9576be47b69ba0eb.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Extracted
vidar
https://steamcommunity.com/profiles/76561199689717899
https://t.me/copterwin
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
ccb16e8c5f69d661dcd3387865ae2010b9c6e11d299daddb9576be47b69ba0eb
-
Size
2.0MB
-
MD5
88c2b57e80427e0be28062be3ff9f8b9
-
SHA1
141c8705a0b86b33ae797f281f279a7bd36be054
-
SHA256
ccb16e8c5f69d661dcd3387865ae2010b9c6e11d299daddb9576be47b69ba0eb
-
SHA512
6738f7d80bb812ad501816f5937185a91c53b4bb1ed08b9e7fe1aea62ba3e282feb0ac61a7dfcfe0b9befa4a9d535d229a7b48b86baef046b99f0049b6c73f00
-
SSDEEP
49152:OePpQE5JtTF+TxMoxc1TU+j+dAzGwlrh:OePpQE5tIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-