vidar | 27d5fbcb441d6ab12c1e67eb6ffe66abcb8e6caa97608c0852630b8e2910c027

General

Target
27d5fbcb441d6ab12c1e67eb6ffe66abcb8e6caa97608c0852630b8e2910c027
Size 576KB
Sample220616-dn88bacbc7
SHA256 27d5fbcb441d6ab12c1e67eb6ffe66abcb8e6caa97608c0852630b8e2910c027
MD5 b8aedc614ecd1c27cc01e7c856085f0b
SHA1 8263296dcb897da080b1907839a3803e611c5537
SHA512 a9bed79f3aee50dd7a087da339e25792bcd0b60fed0ecda52781d58fea85582d2d54ff4f972d09e38d56083b4ca997f2ad23764b2f148efde36e8b49e3b3ebe2
SSDEEP 12288:CJjwsORzaDSssIiAmIMMfeu9Qu9fxl3uyTSrjWXX3/n:+jvOdyxliQGu9Rdx8yTSrjWXP
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Vidar Stealer 1 IoCs

stealer

resource	yara_rule
sample	family_vidar

Vidar log file 1 IoCs

Detects a log file produced by Vidar.

resource	yara_rule
sample	vidar_log_file

SHA256 27d5fbcb441d6ab12c1e67eb6ffe66abcb8e6caa97608c0852630b8e2910c027
MD5 b8aedc614ecd1c27cc01e7c856085f0b
SHA1 8263296dcb897da080b1907839a3803e611c5537
SHA512 a9bed79f3aee50dd7a087da339e25792bcd0b60fed0ecda52781d58fea85582d2d54ff4f972d09e38d56083b4ca997f2ad23764b2f148efde36e8b49e3b3ebe2
SSDEEP 12288:CJjwsORzaDSssIiAmIMMfeu9Qu9fxl3uyTSrjWXX3/n:+jvOdyxliQGu9Rdx8yTSrjWXP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

381754

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths