General
-
Target
c47c7cf2497d0df514193831ccc475b1935bf8305142c5668ffab62b40f6afd8
-
Size
2.4MB
-
Sample
240601-jvaafseg2x
-
MD5
24e1697efcc92b0c3951cce68507a76d
-
SHA1
8874bf37e8d06ffc7e87c1f90db164cad90be0e6
-
SHA256
c47c7cf2497d0df514193831ccc475b1935bf8305142c5668ffab62b40f6afd8
-
SHA512
f1c84ebec174896ae55241a25e702397804b36bf5a39749f888fe367e49b1fb7fca99113dd14a361b1fe253fc91837d875358a061f32aef6b8fe2ac22e2cb9ff
-
SSDEEP
49152:wQc81KnB/a/hNT/dFYa8aesY3Ot4N7G/:wDta/hNT/dFn0etD/
Static task
static1
Behavioral task
behavioral1
Sample
c47c7cf2497d0df514193831ccc475b1935bf8305142c5668ffab62b40f6afd8.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Extracted
vidar
https://t.me/ta904ek
https://steamcommunity.com/profiles/76561199695752269
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
c47c7cf2497d0df514193831ccc475b1935bf8305142c5668ffab62b40f6afd8
-
Size
2.4MB
-
MD5
24e1697efcc92b0c3951cce68507a76d
-
SHA1
8874bf37e8d06ffc7e87c1f90db164cad90be0e6
-
SHA256
c47c7cf2497d0df514193831ccc475b1935bf8305142c5668ffab62b40f6afd8
-
SHA512
f1c84ebec174896ae55241a25e702397804b36bf5a39749f888fe367e49b1fb7fca99113dd14a361b1fe253fc91837d875358a061f32aef6b8fe2ac22e2cb9ff
-
SSDEEP
49152:wQc81KnB/a/hNT/dFYa8aesY3Ot4N7G/:wDta/hNT/dFn0etD/
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-