General
-
Target
4542ef62171f80026d14fa14d03e33b5a001895fd6033721bd07ed5cedb83979
-
Size
2.4MB
-
Sample
240606-3hbgjaef94
-
MD5
8a9f44d7a5af1baf58fa889e6ef5d9ff
-
SHA1
393bb8e8580b3c5a0ec98cd1a2976279b184b633
-
SHA256
4542ef62171f80026d14fa14d03e33b5a001895fd6033721bd07ed5cedb83979
-
SHA512
8f7a5fc08abbcef8617fb7d20a7628e55d379b5ec007515edd6a9ab490a564a0b09b987db682a00919f6e42f0c6ffbd9dc1bdd0066e970e57222a3c0a8939f51
-
SSDEEP
49152:wQc81KnB/a/hNT/dRYa8aesY3Ot4N7G/:wDta/hNT/dRn0etD/
Static task
static1
Behavioral task
behavioral1
Sample
4542ef62171f80026d14fa14d03e33b5a001895fd6033721bd07ed5cedb83979.exe
Resource
win7-20240508-en
Malware Config
Extracted
stealc
Extracted
vidar
https://t.me/ta904ek
https://steamcommunity.com/profiles/76561199695752269
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
4542ef62171f80026d14fa14d03e33b5a001895fd6033721bd07ed5cedb83979
-
Size
2.4MB
-
MD5
8a9f44d7a5af1baf58fa889e6ef5d9ff
-
SHA1
393bb8e8580b3c5a0ec98cd1a2976279b184b633
-
SHA256
4542ef62171f80026d14fa14d03e33b5a001895fd6033721bd07ed5cedb83979
-
SHA512
8f7a5fc08abbcef8617fb7d20a7628e55d379b5ec007515edd6a9ab490a564a0b09b987db682a00919f6e42f0c6ffbd9dc1bdd0066e970e57222a3c0a8939f51
-
SSDEEP
49152:wQc81KnB/a/hNT/dRYa8aesY3Ot4N7G/:wDta/hNT/dRn0etD/
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-