General
-
Target
ea649119c19e22545399927f436c891bc2e2478d09e70be98c5b5ece85bc8283
-
Size
725KB
-
Sample
211015-erwbasaee6
-
MD5
001d100080b180200616b565d2f6f4d3
-
SHA1
61817e7d0623b5c3b0fb2c50762537e3894b5ed7
-
SHA256
ea649119c19e22545399927f436c891bc2e2478d09e70be98c5b5ece85bc8283
-
SHA512
503280b07ca36557136489f65f940bc3715e10a5f57f7d222d7608d40bd4e8d99c27af561d6b267930f235003979beffa4b5fbdb34a780ee4f2cd284098ffa6c
Static task
static1
Malware Config
Extracted
vidar
41.3
1008
https://mas.to/@oleg98
-
profile_id
1008
Targets
-
-
Target
ea649119c19e22545399927f436c891bc2e2478d09e70be98c5b5ece85bc8283
-
Size
725KB
-
MD5
001d100080b180200616b565d2f6f4d3
-
SHA1
61817e7d0623b5c3b0fb2c50762537e3894b5ed7
-
SHA256
ea649119c19e22545399927f436c891bc2e2478d09e70be98c5b5ece85bc8283
-
SHA512
503280b07ca36557136489f65f940bc3715e10a5f57f7d222d7608d40bd4e8d99c27af561d6b267930f235003979beffa4b5fbdb34a780ee4f2cd284098ffa6c
-
Vidar Stealer
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-