Analysis
-
max time kernel
143s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
06-05-2023 20:31
General
-
Target
1004c6317f143049116b000a3eadeebce5d4f9d027e639873e8d06b32254ec06.exe
-
Size
408KB
-
MD5
bb45c1ebd56e6fedab9427d43dfd0aa5
-
SHA1
d38be92272a5662f74590b72008779cb30b3a266
-
SHA256
1004c6317f143049116b000a3eadeebce5d4f9d027e639873e8d06b32254ec06
-
SHA512
5de1cdde2283840455be16f83aa195d8eff1af9b53bc0503f9af3debe196f5b26b702ecbbe0c0fdee4feff2c5d68796bead4702289df1b930b4521e4a1e1cfa6
-
SSDEEP
6144:7tylPCvzEnK/u4jCIhXyYVQRX11aQVNJ8z6NAhoglN6edNo3J1:pylPCvfyYVaXjPDKzQJkdNo
Malware Config
Extracted
vidar
3.6
78489afd9d9a4747beb445e5fb5b9c96
https://steamcommunity.com/profiles/76561199499188534
https://t.me/nutalse
-
profile_id_v2
78489afd9d9a4747beb445e5fb5b9c96
-
user_agent
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36
Signatures
-
Vidar
Vidar is an infostealer based on Arkei stealer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1004c6317f143049116b000a3eadeebce5d4f9d027e639873e8d06b32254ec06.exe"C:\Users\Admin\AppData\Local\Temp\1004c6317f143049116b000a3eadeebce5d4f9d027e639873e8d06b32254ec06.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
372KB
-
Filesize
484KB
-
Filesize
484KB
-
Filesize
484KB