General
-
Target
f658e172bc7c8168b216c385209cb424b76d6e23e218ae32264deabb926e2165
-
Size
770KB
-
Sample
211010-sqxpmafhe5
-
MD5
d06172cc49f59be0570e30c7c4d89849
-
SHA1
06d94423ca79e54e9e1fb505f97c9e7dca4ed086
-
SHA256
f658e172bc7c8168b216c385209cb424b76d6e23e218ae32264deabb926e2165
-
SHA512
63de3af1984d499662aafeada87995cd3c26e6f3ddee2f462a8dd947d21b8daa9c053eaf9e1f4c8729afc8ffd50950c61c38ee91163aa01821d3adcceccc552d
Static task
static1
Malware Config
Extracted
vidar
41.2
1008
https://mas.to/@serg4325
-
profile_id
1008
Targets
-
-
Target
f658e172bc7c8168b216c385209cb424b76d6e23e218ae32264deabb926e2165
-
Size
770KB
-
MD5
d06172cc49f59be0570e30c7c4d89849
-
SHA1
06d94423ca79e54e9e1fb505f97c9e7dca4ed086
-
SHA256
f658e172bc7c8168b216c385209cb424b76d6e23e218ae32264deabb926e2165
-
SHA512
63de3af1984d499662aafeada87995cd3c26e6f3ddee2f462a8dd947d21b8daa9c053eaf9e1f4c8729afc8ffd50950c61c38ee91163aa01821d3adcceccc552d
-
Vidar Stealer
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-