General
-
Target
3f1882ae78093210ca768fb8c86db9a7777d64fa5c51f753eaefde0ed83f0949
-
Size
1.9MB
-
Sample
240528-mjp4bagg36
-
MD5
e26cb760a8f947c119a9cf39aafe9f1a
-
SHA1
1c4a91c4305ac0e0f65782176c10fdf817f8cdb7
-
SHA256
3f1882ae78093210ca768fb8c86db9a7777d64fa5c51f753eaefde0ed83f0949
-
SHA512
4a6ff3a1df5fd58534633ca8475d5f822a57d6891802908cee6d349cd164b49f262feac2d6062cae457b1e3d4d28eb3917857992316a8ef208a89e78c35d6b9a
-
SSDEEP
49152:CdKfTn6v+JtTF+TxMoxc1TU+j+dAzGwlrh:CdKfTn9tIuoITsdZ
Static task
static1
Behavioral task
behavioral1
Sample
3f1882ae78093210ca768fb8c86db9a7777d64fa5c51f753eaefde0ed83f0949.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Extracted
vidar
https://steamcommunity.com/profiles/76561199689717899
https://t.me/copterwin
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
3f1882ae78093210ca768fb8c86db9a7777d64fa5c51f753eaefde0ed83f0949
-
Size
1.9MB
-
MD5
e26cb760a8f947c119a9cf39aafe9f1a
-
SHA1
1c4a91c4305ac0e0f65782176c10fdf817f8cdb7
-
SHA256
3f1882ae78093210ca768fb8c86db9a7777d64fa5c51f753eaefde0ed83f0949
-
SHA512
4a6ff3a1df5fd58534633ca8475d5f822a57d6891802908cee6d349cd164b49f262feac2d6062cae457b1e3d4d28eb3917857992316a8ef208a89e78c35d6b9a
-
SSDEEP
49152:CdKfTn6v+JtTF+TxMoxc1TU+j+dAzGwlrh:CdKfTn9tIuoITsdZ
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-