General
-
Target
ac729922425fa88fca620b03a5599bdde53b2b33ce0bcf69797e13089bc07921
-
Size
2.2MB
-
Sample
240628-qpyt7a1hrh
-
MD5
03e91d3940104ab30f6d9b6483a76e66
-
SHA1
fe4cbefd208c9ceed388ce482e3e2a7e1da0b724
-
SHA256
ac729922425fa88fca620b03a5599bdde53b2b33ce0bcf69797e13089bc07921
-
SHA512
5c866a0aad25894e23c7afaedc37853c1522d40a174fce563ba468f0c15b08c3aec5e43630eb5bfefc125eaf11a304146b1694c06373c2273ab187acfd59993d
-
SSDEEP
49152:qpjNvr9ySAOmw4RHHO+SASagXkJr4MDkUwm:qpjNp7p4RHH8n5A
Static task
static1
Behavioral task
behavioral1
Sample
ac729922425fa88fca620b03a5599bdde53b2b33ce0bcf69797e13089bc07921.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
vidar
https://t.me/g067n
https://steamcommunity.com/profiles/76561199707802586
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:129.0) Gecko/20100101 Firefox/129.0
Targets
-
-
Target
ac729922425fa88fca620b03a5599bdde53b2b33ce0bcf69797e13089bc07921
-
Size
2.2MB
-
MD5
03e91d3940104ab30f6d9b6483a76e66
-
SHA1
fe4cbefd208c9ceed388ce482e3e2a7e1da0b724
-
SHA256
ac729922425fa88fca620b03a5599bdde53b2b33ce0bcf69797e13089bc07921
-
SHA512
5c866a0aad25894e23c7afaedc37853c1522d40a174fce563ba468f0c15b08c3aec5e43630eb5bfefc125eaf11a304146b1694c06373c2273ab187acfd59993d
-
SSDEEP
49152:qpjNvr9ySAOmw4RHHO+SASagXkJr4MDkUwm:qpjNp7p4RHH8n5A
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-