General
-
Target
6c8956e1d8569190a30b8479d4e5b91d6a46605d35ddd686d35d14d9fddec81c
-
Size
1.8MB
-
Sample
240603-jgye5ahe36
-
MD5
0f43393cf1c94a0e0ca411c59c12f19d
-
SHA1
2eeeca9f4be7ce88fce5764b5ff02b8888fc1eba
-
SHA256
6c8956e1d8569190a30b8479d4e5b91d6a46605d35ddd686d35d14d9fddec81c
-
SHA512
593bc26e1e1d150e536f1a79cdb4e57d5c1dfc1df94cbb7db60836fa16909c62742a056bb15a7f80e10c979441c44c92a9c587195d4e1f3419261ddd2906455b
-
SSDEEP
24576:W7YfUB7F1931tb3YaOV+rEfv0xwT3zxNOt4XigDSCuptNEynEsqqfD:W75B7FDFtb3Ya8aesY3Ot4N7G/
Static task
static1
Behavioral task
behavioral1
Sample
6c8956e1d8569190a30b8479d4e5b91d6a46605d35ddd686d35d14d9fddec81c.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
Extracted
vidar
https://t.me/ta904ek
https://steamcommunity.com/profiles/76561199695752269
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
6c8956e1d8569190a30b8479d4e5b91d6a46605d35ddd686d35d14d9fddec81c
-
Size
1.8MB
-
MD5
0f43393cf1c94a0e0ca411c59c12f19d
-
SHA1
2eeeca9f4be7ce88fce5764b5ff02b8888fc1eba
-
SHA256
6c8956e1d8569190a30b8479d4e5b91d6a46605d35ddd686d35d14d9fddec81c
-
SHA512
593bc26e1e1d150e536f1a79cdb4e57d5c1dfc1df94cbb7db60836fa16909c62742a056bb15a7f80e10c979441c44c92a9c587195d4e1f3419261ddd2906455b
-
SSDEEP
24576:W7YfUB7F1931tb3YaOV+rEfv0xwT3zxNOt4XigDSCuptNEynEsqqfD:W75B7FDFtb3Ya8aesY3Ot4N7G/
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-