General
-
Target
fdf090545751ce09207f7cec140d21d246cb2f25002683e2cd36c92e18707f56.exe
-
Size
282KB
-
Sample
240913-ceweesxhnr
-
MD5
3a507b0b6463481cbb8d248efa262ddd
-
SHA1
97cc6f79eb1352660997a2194d7d3c9e1aff7a0e
-
SHA256
fdf090545751ce09207f7cec140d21d246cb2f25002683e2cd36c92e18707f56
-
SHA512
4e0abe7ecd536b25146a663ebc49afd955727d32e2e01a6b7305afec79decbc649e95e841d18e226e346eb4d1e91228c215888c1ffb5363d888f6a1a6fed57a8
-
SSDEEP
6144:4ELt9KOtbS8O8F+pQ1UUPeZEUA85wR1ffmFSA7aFkHJuNEO:37tbStpixPRUkWB7a0wNEO
Static task
static1
Behavioral task
behavioral1
Sample
fdf090545751ce09207f7cec140d21d246cb2f25002683e2cd36c92e18707f56.exe
Resource
win7-20240903-en
Malware Config
Extracted
vidar
https://t.me/edm0d
https://steamcommunity.com/profiles/76561199768374681
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0
Targets
-
-
Target
fdf090545751ce09207f7cec140d21d246cb2f25002683e2cd36c92e18707f56.exe
-
Size
282KB
-
MD5
3a507b0b6463481cbb8d248efa262ddd
-
SHA1
97cc6f79eb1352660997a2194d7d3c9e1aff7a0e
-
SHA256
fdf090545751ce09207f7cec140d21d246cb2f25002683e2cd36c92e18707f56
-
SHA512
4e0abe7ecd536b25146a663ebc49afd955727d32e2e01a6b7305afec79decbc649e95e841d18e226e346eb4d1e91228c215888c1ffb5363d888f6a1a6fed57a8
-
SSDEEP
6144:4ELt9KOtbS8O8F+pQ1UUPeZEUA85wR1ffmFSA7aFkHJuNEO:37tbStpixPRUkWB7a0wNEO
-
Detect Vidar Stealer
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-