General
-
Target
48a95960a4229a8780b4382c7cbe8bc4aadc7c57b99842594c584b0b3f637564
-
Size
2.4MB
-
Sample
240606-3wgwgafa29
-
MD5
c34d17353d26c4618149c213c9453d30
-
SHA1
f76c57e358de3984f1a49002ad7a24be3d79affc
-
SHA256
48a95960a4229a8780b4382c7cbe8bc4aadc7c57b99842594c584b0b3f637564
-
SHA512
2aa12c7489c14834fe842ec75ac407451afb361bdeb47d07b29738799f0df7a23b81fc49df74723e27f3e8ef90b36dac13f141c5a9502d97048a824e6efe64c7
-
SSDEEP
49152:wQc81KnB/a/hNT/dhYa8aesY3Ot4N7G/:wDta/hNT/dhn0etD/
Static task
static1
Behavioral task
behavioral1
Sample
48a95960a4229a8780b4382c7cbe8bc4aadc7c57b99842594c584b0b3f637564.exe
Resource
win7-20240221-en
Malware Config
Extracted
stealc
Extracted
vidar
https://t.me/ta904ek
https://steamcommunity.com/profiles/76561199695752269
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Targets
-
-
Target
48a95960a4229a8780b4382c7cbe8bc4aadc7c57b99842594c584b0b3f637564
-
Size
2.4MB
-
MD5
c34d17353d26c4618149c213c9453d30
-
SHA1
f76c57e358de3984f1a49002ad7a24be3d79affc
-
SHA256
48a95960a4229a8780b4382c7cbe8bc4aadc7c57b99842594c584b0b3f637564
-
SHA512
2aa12c7489c14834fe842ec75ac407451afb361bdeb47d07b29738799f0df7a23b81fc49df74723e27f3e8ef90b36dac13f141c5a9502d97048a824e6efe64c7
-
SSDEEP
49152:wQc81KnB/a/hNT/dhYa8aesY3Ot4N7G/:wDta/hNT/dhn0etD/
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-