Overview

overview

10

Static

static

10

41839e491a...28.exe

windows7_x64

10

41839e491a...28.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41839e491ad6d2fef519c25fd4476cfc9749f49831dc6f53a8274e39e1f43e28

  • Size

    556KB

  • MD5

    9f7a5855b985ec4e17c6483456050e0d

  • SHA1

    af606f0c570da6a45345599eebd2db68f31cf79d

  • SHA256

    41839e491ad6d2fef519c25fd4476cfc9749f49831dc6f53a8274e39e1f43e28

  • SHA512

    22d95d9dbcd176bb6e941899616ddefd840c7f04f9eebf3ee1c5b43d88a9374e9b3a2be8021c45ba9b47a7c412836ed1162a3ed25f4dc8e31990d5dd8a2eb61a

  • SSDEEP

    12288:rJjwsORzaDSssIiAmIMMfeu9Qu9fxl3uyTSr/WjX3/n:1jvOdyxliQGu9Rdx8yTSr/WjP

Score
10/10
stealer112vidarmasslogger

Malware Config

Extracted

Family

vidar

Version

5

Botnet

112

C2

http://kolobkoproms.ug/

Attributes
  • profile_id

    112

Signatures

  • Masslogger family
    masslogger
  • Vidar Stealer 1 IoCs
    stealer
  • Vidar family
    vidar
  • Vidar log file 1 IoCs

    Detects a log file produced by Vidar.

Files

  • 41839e491ad6d2fef519c25fd4476cfc9749f49831dc6f53a8274e39e1f43e28
    .exe windows x86

    b4c442a653085d78e85b963e4db4fdf8


    Headers

    Imports

    Sections