Overview

overview

10

Static

static

10

b0981964c5...ff.exe

windows7_x64

10

b0981964c5...ff.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    b0981964c5f052cf490bd5a6a902263bdfc45dae4d11b7c6160ab016d3cf2bff
  • Size 551KB
  • Sample220624-2agsxafcan
  • SHA256 b0981964c5f052cf490bd5a6a902263bdfc45dae4d11b7c6160ab016d3cf2bff
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
stealer11vidarmasslogger

Malware Config

Extracted

Family

  • vidar

Version

  • 4.2

Botnet

  • 11

C2

  • http://62.113.117.201/anti_vidar/data/

Attributes
  • profile_id

    11

Signatures

  • Masslogger family
    masslogger
  • Vidar Stealer 1 IoCs
    stealer
  • Vidar family
    vidar
  • Vidar log file 1 IoCs

    Detects a log file produced by Vidar.

File Explorer

  • b0981964c5f052cf490bd5a6a902263bdfc45dae4d11b7c6160ab016d3cf2bff
    .exe 551KB

b0981964c5f052cf490bd5a6a902263bdfc45dae4d11b7c6160ab016d3cf2bff

  • IMPHASH 98b4cfcd7dfc1cefe6c1cd6068895d2d
  • SHA256 b0981964c5f052cf490bd5a6a902263bdfc45dae4d11b7c6160ab016d3cf2bff
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • Vidar Stealer

    stealer

  • Vidar log file

    Detects a log file produced by Vidar.

Minor OS version
Major OS version
Entry point
377418
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths