General
-
Target
b2d296051aa37091c438a1fd3c06e0eef3531dab3d2ea1e6454fe8b26cbc9f20
-
Size
255KB
-
Sample
221026-dp2jvsefbq
-
MD5
e802e44b7c4caa89297f3a1ca5486956
-
SHA1
320d012a22ab0b57fd339cfdb10064fbaff48c13
-
SHA256
b2d296051aa37091c438a1fd3c06e0eef3531dab3d2ea1e6454fe8b26cbc9f20
-
SHA512
b811987f8c183685c321dc247388f74cbe1adff700f6ec2e5cc9507c143bf033b128dac07d80a2ae457dbca99681941e5d97f108858e2c8fe421d7c8cbec9b0f
-
SSDEEP
6144:pjCi698LnoIkJeAybf4HdtlB3o2OGmmsWDmiaovV:FCi9DoIkJeXbf47lYGmzsJaovV
Static task
static1
Malware Config
Extracted
vidar
55.2
937
https://t.me/slivetalks
https://c.im/@xinibin420
-
profile_id
937
Targets
-
-
Target
b2d296051aa37091c438a1fd3c06e0eef3531dab3d2ea1e6454fe8b26cbc9f20
-
Size
255KB
-
MD5
e802e44b7c4caa89297f3a1ca5486956
-
SHA1
320d012a22ab0b57fd339cfdb10064fbaff48c13
-
SHA256
b2d296051aa37091c438a1fd3c06e0eef3531dab3d2ea1e6454fe8b26cbc9f20
-
SHA512
b811987f8c183685c321dc247388f74cbe1adff700f6ec2e5cc9507c143bf033b128dac07d80a2ae457dbca99681941e5d97f108858e2c8fe421d7c8cbec9b0f
-
SSDEEP
6144:pjCi698LnoIkJeAybf4HdtlB3o2OGmmsWDmiaovV:FCi9DoIkJeXbf47lYGmzsJaovV
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-