Overview

overview

10

Static

static

10

56ae0f5f34...ac.exe

windows7_x64

10

56ae0f5f34...ac.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56ae0f5f3471eb274a59146fcb33e9d2dde95e6db735b9680276ef2d0a6cf2ac

  • Size

    556KB

  • MD5

    2d75516fed5992be6a8b600a40ab6cfa

  • SHA1

    ec8e2926145ed6cbd862a3c7994200afa3704efa

  • SHA256

    56ae0f5f3471eb274a59146fcb33e9d2dde95e6db735b9680276ef2d0a6cf2ac

  • SHA512

    13df6f4cf24762f8150ea2274afa94619b4feb9e3d75d47c95e81ad820dc8f1fb4d005080650796058e74c4861901c39c0ab7c7cd0bef1527622b9970b7a23c2

  • SSDEEP

    12288:7pzltnitLpboSNixt0VUXew6T/S1fryDB5WCX3/:dzl9QuS40yXeRbSlyDB5WC

Score
10/10
stealer96vidarmasslogger

Malware Config

Extracted

Family

vidar

Version

4.3

Botnet

96

C2

http://nasalietco.com/

Attributes
  • profile_id

    96

Signatures

  • Masslogger family
    masslogger
  • Vidar Stealer 1 IoCs
    stealer
  • Vidar family
    vidar
  • Vidar log file 1 IoCs

    Detects a log file produced by Vidar.

Files

  • 56ae0f5f3471eb274a59146fcb33e9d2dde95e6db735b9680276ef2d0a6cf2ac
    .exe windows x86

    b4c442a653085d78e85b963e4db4fdf8


    Headers

    Imports

    Sections