General
-
Target
bd9e97bf3eedb31100433d640330a403a12fd100df3429ca37c163f8fec1d1d9
-
Size
636KB
-
Sample
211012-k55d1scab5
-
MD5
43c36f46cbe31c0c5617bd947bf997e2
-
SHA1
b253ff8d96b87535fbc75a556a0823a0582b677f
-
SHA256
bd9e97bf3eedb31100433d640330a403a12fd100df3429ca37c163f8fec1d1d9
-
SHA512
935ce3c2d9393813eee2c3f9636f636e1a41e9193af800185132a1d4617f198af87a979d8f7eb203cf6d28e1ac5466416305ccda2964e26ead447be6246e6e71
Static task
static1
Malware Config
Extracted
vidar
41.3
1008
https://mas.to/@oleg98
-
profile_id
1008
Targets
-
-
Target
bd9e97bf3eedb31100433d640330a403a12fd100df3429ca37c163f8fec1d1d9
-
Size
636KB
-
MD5
43c36f46cbe31c0c5617bd947bf997e2
-
SHA1
b253ff8d96b87535fbc75a556a0823a0582b677f
-
SHA256
bd9e97bf3eedb31100433d640330a403a12fd100df3429ca37c163f8fec1d1d9
-
SHA512
935ce3c2d9393813eee2c3f9636f636e1a41e9193af800185132a1d4617f198af87a979d8f7eb203cf6d28e1ac5466416305ccda2964e26ead447be6246e6e71
-
Vidar Stealer
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-