General
-
Target
vid.exe
-
Size
447KB
-
Sample
220519-cve3dahhe2
-
MD5
a5ee4237940e64d6edc5585d98784065
-
SHA1
81145ebbb522f045f400582f360de32aa2bbad0d
-
SHA256
2144e7805a7d52125ebf336d6632b6ea7d640e2b442eae797bd0048c220347ba
-
SHA512
6de6b191413a0ef59fcaf521e5f435d14eccc0f9fee9dd6e28eea2af591075b8e132b4dc7ca94fa1a0da03faa4e42d76011dc8511915646a9d79ea898fde3b80
Static task
static1
Behavioral task
behavioral1
Sample
vid.exe
Resource
win7-20220414-en
Malware Config
Extracted
vidar
52.2
1376
https://t.me/netflixaccsfree
https://mastodon.social/@ronxik12
-
profile_id
1376
Targets
-
-
Target
vid.exe
-
Size
447KB
-
MD5
a5ee4237940e64d6edc5585d98784065
-
SHA1
81145ebbb522f045f400582f360de32aa2bbad0d
-
SHA256
2144e7805a7d52125ebf336d6632b6ea7d640e2b442eae797bd0048c220347ba
-
SHA512
6de6b191413a0ef59fcaf521e5f435d14eccc0f9fee9dd6e28eea2af591075b8e132b4dc7ca94fa1a0da03faa4e42d76011dc8511915646a9d79ea898fde3b80
-
suricata: ET MALWARE Vidar/Arkei/Megumin Stealer Keywords Retrieved
suricata: ET MALWARE Vidar/Arkei/Megumin Stealer Keywords Retrieved
-
suricata: ET MALWARE W32/Agent.OGR!tr.pws Stealer
suricata: ET MALWARE W32/Agent.OGR!tr.pws Stealer
-
Vidar Stealer
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-