General
-
Target
addc536bf186bf0f1f3c1bfb0dd10fb6.exe
-
Size
743KB
-
Sample
211013-lfxhjsdha5
-
MD5
addc536bf186bf0f1f3c1bfb0dd10fb6
-
SHA1
30608904d812a48535427dff89ca28640477fb90
-
SHA256
9cffbade290f88c34b8a5e2e551fd9ae035eeda9d49d0eb0fecec8e40ecf2e84
-
SHA512
4fa4fd543f20103dc03690e192e251a19fdd4e79af31fbfa57cf9d68eb290412f9fa76c943bac95d6af9bd613e8efb492ad83094587720d68f8d4597cce61091
Static task
static1
Behavioral task
behavioral1
Sample
addc536bf186bf0f1f3c1bfb0dd10fb6.exe
Resource
win7-en-20210920
Malware Config
Extracted
vidar
41.3
1008
https://mas.to/@oleg98
-
profile_id
1008
Targets
-
-
Target
addc536bf186bf0f1f3c1bfb0dd10fb6.exe
-
Size
743KB
-
MD5
addc536bf186bf0f1f3c1bfb0dd10fb6
-
SHA1
30608904d812a48535427dff89ca28640477fb90
-
SHA256
9cffbade290f88c34b8a5e2e551fd9ae035eeda9d49d0eb0fecec8e40ecf2e84
-
SHA512
4fa4fd543f20103dc03690e192e251a19fdd4e79af31fbfa57cf9d68eb290412f9fa76c943bac95d6af9bd613e8efb492ad83094587720d68f8d4597cce61091
-
Vidar Stealer
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-