General
-
Target
496e7c2feb1825e9abd097fb9e11b480dad7ef3b331e6e84216f896b60452160
-
Size
605KB
-
Sample
210922-26h1vaead5
-
MD5
46d41878572f7937a70e7f8b462d6b3f
-
SHA1
b6576795111c63d525a3507b08e2a8cd06e4d637
-
SHA256
496e7c2feb1825e9abd097fb9e11b480dad7ef3b331e6e84216f896b60452160
-
SHA512
78fb4af8db67ddfdf49fcfbcc4682177f72b7849f23d2689accc5d7190d3cbed6879506ef27713c8dbc18d61b00aa84f0f5f0e44a3a9064bd35e0c8ed25c6e14
Static task
static1
Malware Config
Extracted
vidar
40.9
828
https://stacenko668.tumblr.com/
-
profile_id
828
Targets
-
-
Target
496e7c2feb1825e9abd097fb9e11b480dad7ef3b331e6e84216f896b60452160
-
Size
605KB
-
MD5
46d41878572f7937a70e7f8b462d6b3f
-
SHA1
b6576795111c63d525a3507b08e2a8cd06e4d637
-
SHA256
496e7c2feb1825e9abd097fb9e11b480dad7ef3b331e6e84216f896b60452160
-
SHA512
78fb4af8db67ddfdf49fcfbcc4682177f72b7849f23d2689accc5d7190d3cbed6879506ef27713c8dbc18d61b00aa84f0f5f0e44a3a9064bd35e0c8ed25c6e14
-
Vidar Stealer
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-