General
-
Target
A831A3EAD1F64D951FADCD5A15CF14E86F9B6B4D418F5.exe
-
Size
426KB
-
Sample
230127-vzvbzadg3y
-
MD5
8007511dfd5ce8407f5dd7cbf47ded88
-
SHA1
36740f63336dde0d4b1960107f7b25ab17969852
-
SHA256
a831a3ead1f64d951fadcd5a15cf14e86f9b6b4d418f5fdb6e28acbe7d90264a
-
SHA512
1c868feb936d37656bf8e2353e0120d5d4d1f36395ca3043ff4c308d2cf47cce1dae2384b75f8b73b95643264e3aba64423fd227b6998cefda229dbce035ae2b
-
SSDEEP
12288:yEiSWvHCOGdMFkXqvoX6RR0TCtyYduHNI:YzvHCRMFkUoqRR0TCAYdE
Static task
static1
Behavioral task
behavioral1
Sample
A831A3EAD1F64D951FADCD5A15CF14E86F9B6B4D418F5.exe
Resource
win7-20221111-en
Malware Config
Extracted
vidar
1.5
14
https://t.me/dahuasecurit
https://steamcommunity.com/profiles/76561199441999914
-
profile_id
14
Targets
-
-
Target
A831A3EAD1F64D951FADCD5A15CF14E86F9B6B4D418F5.exe
-
Size
426KB
-
MD5
8007511dfd5ce8407f5dd7cbf47ded88
-
SHA1
36740f63336dde0d4b1960107f7b25ab17969852
-
SHA256
a831a3ead1f64d951fadcd5a15cf14e86f9b6b4d418f5fdb6e28acbe7d90264a
-
SHA512
1c868feb936d37656bf8e2353e0120d5d4d1f36395ca3043ff4c308d2cf47cce1dae2384b75f8b73b95643264e3aba64423fd227b6998cefda229dbce035ae2b
-
SSDEEP
12288:yEiSWvHCOGdMFkXqvoX6RR0TCtyYduHNI:YzvHCRMFkUoqRR0TCAYdE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-