General
-
Target
eufive_20211022-222458
-
Size
766KB
-
Sample
211022-z4ngfacbb6
-
MD5
50ae704cafeba5b700d5fbb6dc68f262
-
SHA1
4fde265276a804e09a9888de211f070c41146ca3
-
SHA256
81136dca1d7943435b75e587b5d5855a83dd2a58e639c059aed0fe15e3f49b2d
-
SHA512
2d5ff42ae151412e17fdf0217ca6b23632a10c62857ae81baf76ed8855f447ac21313c135f6c2f69952e9f3524e20398fcb2e6e4db9ef00b06d35e6355cee4b1
Static task
static1
Behavioral task
behavioral1
Sample
eufive_20211022-222458.exe
Resource
win7-en-20210920
Malware Config
Extracted
vidar
41.5
865
https://mas.to/@xeroxxx
-
profile_id
865
Targets
-
-
Target
eufive_20211022-222458
-
Size
766KB
-
MD5
50ae704cafeba5b700d5fbb6dc68f262
-
SHA1
4fde265276a804e09a9888de211f070c41146ca3
-
SHA256
81136dca1d7943435b75e587b5d5855a83dd2a58e639c059aed0fe15e3f49b2d
-
SHA512
2d5ff42ae151412e17fdf0217ca6b23632a10c62857ae81baf76ed8855f447ac21313c135f6c2f69952e9f3524e20398fcb2e6e4db9ef00b06d35e6355cee4b1
-
Vidar Stealer
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-