General

  • Target

    ba0dbbd3b2f7b9194b45ff3e724b6408578b2ca2c3715962d31a0e361e4905b4

  • Size

    556KB

  • MD5

    73342bdc5cd080f1c7ff67b114c22ed2

  • SHA1

    a614eb57cea7d07a0eca397c25be2e0a81c88ecb

  • SHA256

    ba0dbbd3b2f7b9194b45ff3e724b6408578b2ca2c3715962d31a0e361e4905b4

  • SHA512

    93a4a88a2b981cae22e17024c91dade065567ca250f1ca527d92c05011230ad3929b86ea40dd8e839e8939a8d9a21bd8c7f380f54f87adae1a6b0288c27dc21b

  • SSDEEP

    12288:JJjwsORzaDSssIiAmIMMfeu9Qu9fxl3uyTSrlWLX3/n:3jvOdyxliQGu9Rdx8yTSrlWLP

Malware Config

Extracted

Family

vidar

Version

5.1

Botnet

122

C2

http://bastionprofi.ug/

Attributes
  • profile_id

    122

Signatures

  • Masslogger family
  • Vidar Stealer 1 IoCs
  • Vidar family
  • Vidar log file 1 IoCs

    Detects a log file produced by Vidar.

Files

  • ba0dbbd3b2f7b9194b45ff3e724b6408578b2ca2c3715962d31a0e361e4905b4
    .exe windows x86

    b4c442a653085d78e85b963e4db4fdf8


    Headers

    Imports

    Sections