General
-
Target
eufive_20211027-033642
-
Size
768KB
-
Sample
211027-l1lxjsbfa2
-
MD5
f070e05905f35156466c6b4a46d07168
-
SHA1
57a646ef661d507e60360dd5c0e7a163ca884ce4
-
SHA256
947efe9d935dac19997009b74689204e3c3e97cc0d591b458d79d0a402faa59c
-
SHA512
926a29fb66a32411a1c190761356a87be6aae782577efbb3d6773a21ee80039b7f3c129acd3d4a100eeb5514821ad4a7123ea41a3e25578f03e168c6373014df
Static task
static1
Behavioral task
behavioral1
Sample
eufive_20211027-033642.exe
Resource
win7-en-20210920
Malware Config
Extracted
vidar
41.5
865
https://mas.to/@xeroxxx
-
profile_id
865
Targets
-
-
Target
eufive_20211027-033642
-
Size
768KB
-
MD5
f070e05905f35156466c6b4a46d07168
-
SHA1
57a646ef661d507e60360dd5c0e7a163ca884ce4
-
SHA256
947efe9d935dac19997009b74689204e3c3e97cc0d591b458d79d0a402faa59c
-
SHA512
926a29fb66a32411a1c190761356a87be6aae782577efbb3d6773a21ee80039b7f3c129acd3d4a100eeb5514821ad4a7123ea41a3e25578f03e168c6373014df
-
Vidar Stealer
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-