General

  • Target

    AppSetup_Update-Launcher.rar

  • Size

    81.2MB

  • Sample

    230518-nl3ymaae96

  • MD5

    dfc9d426bc049010398cd315e4cb796a

  • SHA1

    6c1e4d4f2e770286d3abea116bec6ded8126f06b

  • SHA256

    f2e6ac8a6218654c3e13d4cf83edc3891cab488f91b68b4cfbd11bc1e2c49bfb

  • SHA512

    e88424a1dec624f72453566cd8fc785d086321ce51f2dcf52a91cd9293c44db3af3a911a268bce3b5af0db3de84224aad6b1428d21dc10433549563c33a6bd1f

  • SSDEEP

    1572864:53aV+g/Ro0Ea4i4RVAEs+mvnGs+mvnaEkU0/+vJqdROIozCJVgtYTPI8TDwIRS:53a8g/RLEaua5+4r+4aEkXWvA+RzCUt7

Malware Config

Extracted

Family

vidar

Version

3.8

Botnet

b89068e4534861e37a204b27184d8ae5

C2

https://steamcommunity.com/profiles/76561198272578552

https://t.me/libpcre

Attributes
  • profile_id_v2

    b89068e4534861e37a204b27184d8ae5

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7

Targets

    • Target

      AppSetup_Update-Launcher.rar

    • Size

      81.2MB

    • MD5

      dfc9d426bc049010398cd315e4cb796a

    • SHA1

      6c1e4d4f2e770286d3abea116bec6ded8126f06b

    • SHA256

      f2e6ac8a6218654c3e13d4cf83edc3891cab488f91b68b4cfbd11bc1e2c49bfb

    • SHA512

      e88424a1dec624f72453566cd8fc785d086321ce51f2dcf52a91cd9293c44db3af3a911a268bce3b5af0db3de84224aad6b1428d21dc10433549563c33a6bd1f

    • SSDEEP

      1572864:53aV+g/Ro0Ea4i4RVAEs+mvnGs+mvnaEkU0/+vJqdROIozCJVgtYTPI8TDwIRS:53a8g/RLEaua5+4r+4aEkXWvA+RzCUt7

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/am.pak

    • Size

      531KB

    • MD5

      e8bac983607c5432f789afdacdda42ac

    • SHA1

      95c26f47f7102be338263fd7f7e365632651f22e

    • SHA256

      ee363b88697a26d486c77bbf05f5f7f62d4b40c235e1d85e11448083070576f7

    • SHA512

      5e26f40c8dc088d21b9b6a01041ece3bd4b2899ee33fdd85be995545c7a24860fdc9c672da8c9345a08891e0bac04ccf4d65de543f4cfba0bab0ae3fb32354c7

    • SSDEEP

      12288:GguzxX8xfzKsEYg95z9SBeuUPQvx30jH8+I:GX8xfzKnYg95z9SBoPQr

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/de.pak

    • Size

      367KB

    • MD5

      cfc9d90273c31ccf66d81739aa76306a

    • SHA1

      ecab570041654b147b3dd118829e2f7ae668f840

    • SHA256

      8bd127d689be65e45bb8d2a2ff66698200da97835809c6b56ec9e2929b70618a

    • SHA512

      c9a5058b34c4045ff1b7ae25f1f47bff14d06b3a97b7b1f30da65618ca7aeb0638d79f4e1cea4773cd92d9dfa7f9d2203e5734d0cfe11ee2d2a460d6cec18380

    • SSDEEP

      6144:F+QNkAjzYyqSFaPjON3Be0mzBWCj0Xs5HgIxBI0gql:cQLjMyvFaCN3mzBd5xy0gql

    Score
    1/10
    • Target

      AppSetup_Update-Launcher/Data/el.pak

    • Size

      664KB

    • MD5

      8f5a15560710db2af852512b7298b93e

    • SHA1

      30a13ebef10108effbad8c24b680228660658415

    • SHA256

      bc07e403272a4d65305fe24a827404d7b931d01cda547f8c07a840d19e591430

    • SHA512

      e3cedc0eaa82b10a68a40aca8ec1379a6bb924766e1c5abd97e39c621dcbc195d6c1ff80921c2320f0f1c87d160bc2a6258108399876339e5104f98d90a861de

    • SSDEEP

      12288:RdquNwK202pgaZH4q5OaPY3HvO9K63/fgBsbfFnxHuhWTT9rkv0pfBtMMkffFZig:RdquNwK202pgaWqsaA3Hm9K63/fgBs9I

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/en-GB.pak

    • Size

      299KB

    • MD5

      05ac84aa6987eb1f55021b6fba56d364

    • SHA1

      58cb66bba3af0c6cc742488ccc342d33fc118660

    • SHA256

      e1e357c853eed83fb6c4133f8f4df377a8eda4fe6f0e55395f21c5ab6e38faa8

    • SHA512

      c615e1eb01412c5e2c0402242d442a6cf08965318d1c0d261ca5bc6df9acba5efa2c87ade20e1e4740d2239ea56d1ce4d3fc7a4c3eabe81b876ecb364b3e91b6

    • SSDEEP

      6144:WJeP/KOb6vG8GGvDJAgdMP9ectcaAfaYEnG2J05SSvqo:1COb6ugdMrcarnGf5SSio

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/en-US.pak

    • Size

      302KB

    • MD5

      3fef69b20e6f9599e9c2369398e571c0

    • SHA1

      92be2b65b62938e6426ab333c82d70d337666784

    • SHA256

      a99bd31907bbdc12bdfbff7b9da6ddd850c273f3a6ece64ee8d1d9b6ef0c501c

    • SHA512

      3057edfb719c07972fd230514ac5e02f88b04c72356fa4a5e5291677dcbab03297942d5ecdc62c8e58d0088aed4d6ea53806c01f0ea622942feb06584241ad2d

    • SSDEEP

      6144:yoaiWmH9xPN6DacNMP9elahdQfaYejDJDsN5ySMZswS:taiWF+cNMbhd7jDJi5ySEswS

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/es-419.pak

    • Size

      366KB

    • MD5

      13c6d0a268545541f325375d431b41ae

    • SHA1

      5f5c41348f00c5e5539d261c2b76ae6e3ec7af83

    • SHA256

      943fa8774ade38d57349a5d27869097a782bc06bd34c40864a85ba829457d127

    • SHA512

      09cbb2b21304ca8afa8b760b738adb5422e83550085f1aed8e8590eeef04a2b0e131e1ead6723c3e85383630c483d7720e55f71305ff4821d7822fe6d7aa4252

    • SSDEEP

      3072:rt+uPUzEx0HrKJBjQMU0dmdv5jrqMCOyu0sdzPh7buhwwJ3Os57lLfGLFg3WSszj:rt+o+I0H6nUxv5rYQQJH5sLFg3WSsTG6

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/es.pak

    • Size

      367KB

    • MD5

      c8086dc25cf0a3c978b2c3b37edf8d67

    • SHA1

      7b6d2ce8b3cc5a33ab2bcd23114fe65ccc568e7a

    • SHA256

      11ef2c0229c1fe1c10be08e3d5f36c973bc3c272f37b40e05c534a118757461b

    • SHA512

      230e6999a6fea1df3b2708eb331a2c25ca53677b3453745ff9cc7fbbc013b69148af5609166720255a2db7e63b25e2d0c599fb07057a6b47bf61f63ea9db9e01

    • SSDEEP

      6144:OYkS2J1Bc2UoWCfgfr56ZLb5R7q5zrB7bUlo4AN6PZmz:OYl2XWn5r0pFRm5zreloXnz

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/et.pak

    • Size

      330KB

    • MD5

      054865950b3b9e8312a7f9490268eaca

    • SHA1

      28b0176112eddb7af58386b4f8aed4a49b9a2661

    • SHA256

      3599e7138a24a31839da877cc9718b9c0c9522437ea93a6222a119080f108d14

    • SHA512

      bfc72f19ad1a52c0da82409accb33a27b2844ed29010207268c7d695ad7562a8867a87b70ac50142909b50b81a5c84d6f6a43968353ae7a72bc042aea8cbb59f

    • SSDEEP

      6144:GPJXg42WkHwGkDmzZpDM0djry2zuJbT/RcLvihV15Ujc43ceLfLPQu:6JuvymrDbWF15Ujf

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/fa.pak

    • Size

      535KB

    • MD5

      c27431f2de37b9643b83e383f7eae5a8

    • SHA1

      16d068d9738e1aa9b94658299a4eac3972520864

    • SHA256

      bb28ad47e95aefaa2d8d7b6a7f449f9707cfadbcd4c21bad8bd8a6578108d2cd

    • SHA512

      4ccc46dc7756ea0e60e6d278bcac1262a54ba03742fd0eb4d9f1f962486394fa56491844871dacb4cb0501c6f594334d3f23f3db82bfdfa1f938e1ae609d6600

    • SSDEEP

      12288:aGz43DX9nuya1jfwHLwNUaGSSfStQvueKT+JwMTAKzIxRAQiHedNu3htodxWetlh:aF3luya1jfwrwNUaGSSfStQvueKT+Jw7

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/fi.pak

    • Size

      338KB

    • MD5

      aac0554a39bb1ae91e2ed4246e04c30e

    • SHA1

      031785024765eda1534fd9504eccbe1b471ae618

    • SHA256

      df8cefa4831fc2fdf817dd6d49a6373edee4f51f23cf990c690e72ce348f69bb

    • SHA512

      a6afc9464047c75157dcb8ece086c1c5bf4dccb48d33da24e35c43110f300cfea503c4cca093f3d4bcc7a0fdcb306138da5be288ef646881b625751e40d93689

    • SSDEEP

      6144:3pR/2jxpvwhnVgQsm3aOE/8aCEELsR5w5jSH4EJ18GWU/8nZRuX1wr2:vOnvoG8a35w5+H4EJ18GWU/o2

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/fil.pak

    • Size

      379KB

    • MD5

      f989a7215cac1e3fb4759e5fba9aef67

    • SHA1

      5ecf35f160e1f8242b3bca163673e24cf6d77403

    • SHA256

      448bc8eae353c188ffaa4c2466956598ad807f0f0aae7f12e1bc59584e1aac2d

    • SHA512

      b872beb5b1c2702f4eae616f633318b4575f573c06a3f1f0f1e1ab83585a52caf2f3c788c0c3a0d499c381fb7f06a3ea355b8686ded2ed1e392662f2746db01f

    • SSDEEP

      6144:Po2wvMrF/y/DQkaRqQHunLxenGkZ3+mo59gmPHkAxw78:ykeCBHudqo5KmF

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/fr.pak

    • Size

      395KB

    • MD5

      13968778147dad5af68fdb7464ca517c

    • SHA1

      42abb9873c472a82d400e6896e90731b7cae06b5

    • SHA256

      7af39af49846fba6d6b8ee18b2a212f1323ebc1cff1af0053194d01d8d5433f6

    • SHA512

      c1f54ccf4f82e158173d9db8464adca64a88f8ddee23afbb51d80535b4f25f138dac16a337504ca3ff8c3dbe9aff05ecc2aaa40afe8d77bbbd4f141b07e39100

    • SSDEEP

      12288:k7L2tn6QuagV1YzhKJZsMYnYE1OxBW50xLHIWWCMcpU8wRp5a5FQusDh6dBKIJFb:GJVdMcN5B

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/gu.pak

    • Size

      755KB

    • MD5

      7b476c423ce29e61b0b21d7b6a2a56b2

    • SHA1

      5558dcec5b2580345b0797f1f2ea41952417335a

    • SHA256

      047da4dfadcfc6bec8f4dc7d250b1757caf31a23bcfa2ea3e1f3b1cdbe9a3995

    • SHA512

      a494ab32e45cf74e2b7e0424b4e3740470c5c6cfac8f6cc980a681eb8c21cab76255391b6884134593dc7b1029ffd861f74b47130533232881c137c41ef92cac

    • SSDEEP

      3072:/h/zHr2DzDNmtZITYKMaWZu/lsMhmkTd4MUz2sQm251jvHsWnIIRfAHw/g/I/B6i:/ZDizBm/Voaz5cYh+Gyj

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/he.pak

    • Size

      468KB

    • MD5

      f4dad4f97b5f75d6d7219d43f630c2b9

    • SHA1

      ed8c790b3b5e3faf683aa978895f266eea5b823e

    • SHA256

      6649a844f222cfcec01e75d3de3cb3658f1347ea3851d31b8124597b87e7b57d

    • SHA512

      f00e7e38ec0da1c110b4142dd13b3cae8b912c16518eeb4cfd7f19a0cef2c6601ec1e4959597066703b12b7dffb44fd918c7170231c2b42e40b0d90241b85133

    • SSDEEP

      12288:lsQOFiBr3By4L92QmYq6A560SAX4o75P5oAHM7O5p9mTfDnwPEQgo:lsbss5Bok

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/hi.pak

    • Size

      787KB

    • MD5

      1185163466551aacae45329c93e92a91

    • SHA1

      0dcbfed274934991966ce666d6d941cfe8366323

    • SHA256

      eda355e3785313e3d982c1d3652266dce1b6e08832056fe58854b825e0712ca5

    • SHA512

      6fad3e24eb868acf78db0591c7ba77abc84e92cda28e8bffee435ea89940a8607e7628c6c5159349377a8d933f373db2dfa4e5715ca404bc3e67fd4a0f22a606

    • SSDEEP

      3072:4m//Yxz8BS65Ob5EeQzFc67R7dk5Sv34QAEm5dmLrsoe4GR3doInN8edYbOqGPt5:rYZ895O9ExFlReg5R5HQO4

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/hr.pak

    • Size

      365KB

    • MD5

      04fdc1dac2cae614b0f566310dc83bd0

    • SHA1

      74e460e19a5e9c8b6181fa37cb9085f93bbc6233

    • SHA256

      bada5828fc0d80c842d1409b54e8da516ae737ca30d86658b3fad5c8ace4722e

    • SHA512

      a07bebd16f00b0b46059a7b80454664757687a59903bc36cb837cfb55e69bf7f683157372f74ff8355ad50c3b747c9674ee942aac95a9804c39acb3841721d24

    • SSDEEP

      3072:Rt0zZ58bkQijHuVGgYzgJ5OSFT0uPFG4rV6WI6DkYAiKbeMuVjLsGW0Yqz7pFyLI:72Z5QYuVb3P6T5D37pW

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/hu.pak

    • Size

      395KB

    • MD5

      410d8966721ff8817eb3a57f95a4b885

    • SHA1

      f0fbe70c772bd635b0c4a927420e15b96dae05a5

    • SHA256

      688312f38488c7256370b1517b84963a3ff886b31692cc504fe169db241a43f0

    • SHA512

      d0aa167ee919589ff3b80640e8db4c6d11f9159e4a246082f0a564482789011c260f124b9a7102649d998c6a89cbff58cffab5a40e33769b990e64d6cc703378

    • SSDEEP

      6144:gvROCXS24UmV5z/fZ2GRoSYTLySam7YF3tys5gRULJatGqUnvydpECk3ICf:gvRZsV5z/+lP7+tys5vNDp

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/id.pak

    • Size

      324KB

    • MD5

      0e82cf23475ab7328741670f4dfa3093

    • SHA1

      fd854e31f4ab212d0b3bca676420d5600d8daa83

    • SHA256

      21368245d99265e760b1b57a3169feb72e6b5099c3f1855155d147b2f788eda4

    • SHA512

      52d694afeb3e7272740192e6b4cab9acab460ae6e66912f090b049a1f431a5c17a4c3d037fc9c450b8a224ed793605e234b4d649a95289770997acd43b5dbb32

    • SSDEEP

      6144:NbXLerWB/kUEPsw0ofjDVnjHFXFmP2L6aF5NyhBvt4fSRsEaF:h7cKE/0GVnjHF1m+LlF5Nyhs

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/it.pak

    • Size

      360KB

    • MD5

      9fbb2f5d9c70d9e46368538853929f75

    • SHA1

      45daceb422478c5a7b7b61f5ee68cc08a19f2ac3

    • SHA256

      13dd077e5e8c8b04ac0854e4466ee074df67c74cd29cc48a0c2c9f96f768fad5

    • SHA512

      77d8607ba52190258ed2e7c6e43a44bad1669294a441cc6ee9d91fa28c26c6675225e41cc309200aee01fecc1a0d369a8e4458c0095c297ed237bba50798c4dd

    • SSDEEP

      6144:dF9dctIYSrqRrhsO1FGT9TEAGw3nlXgOPwtkWgGyu8HryYm0wNB6XtS6LevpLOvy:3/lZRe8+Yx3vjw5Lsol

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/ja.pak

    • Size

      440KB

    • MD5

      67a379c826f0eb60750bfba0b8e10468

    • SHA1

      62662d8efd773b18c99169752996b11f30a64ca3

    • SHA256

      2c5457b0fa6fe41b7b524aa726dae4dd69e7072864f73f211c731810d00b9323

    • SHA512

      38c44dd6c83362cd118543b7619811c671283618a3081f07a015f8110388d71b7767eb0a7a49c37c8e2e9e900dae6aa7f8560e5494afe6b29e01ede402e4944e

    • SSDEEP

      6144:jUZWQGehaoFbqn6S+RUpZSb2LwPH+5VgxVg:LQhJe60pZSb2kPH+5VV

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/kn.pak

    • Size

      872KB

    • MD5

      8a3427385226ab72e8421d84225f7adf

    • SHA1

      701a85bc6bca0ed33dbe1aa3a617ce26576c7421

    • SHA256

      c315e791770cea204c7e49ef5b68fa46fe42864a33e77fa5a1d42f87ba85124f

    • SHA512

      310719fb102c1f892d354f1478bba06e856bd45da08416be970a0a76e44c7d81aaa9ddd878234b2348b625e0d18cfe7c966379115f35d51f4ee78a986c1243b0

    • SSDEEP

      6144:O+wN1jeEb7qb4GvGK25j/u7cB2jrith0vkcVwVattrmQLHMj0AWviYRpySIvSuNu:NwzSS7qdR+QygZ5gJ765mWUj+yt++FS

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/ko.pak

    • Size

      369KB

    • MD5

      3340fd0a5e8f97f122e1d6e9a2052ca6

    • SHA1

      9c8504b78633b6d6e445723b351a08392916c7d0

    • SHA256

      3ee7d79af9ec226bebfdd9d79907f1bc97d528d2009dbd0db23d74ad655e0256

    • SHA512

      07eb8dab24ea8545cdaf38e35bc23a71a33bf87a1c0ac78ac564c103c6ae53357de2d4fd635b22995cefdc9d8e8241c66d78dd44d68a9f2f251be77c0afa7704

    • SSDEEP

      6144:DL/SK0qZvHJmb1QdTVtZqZXRZqiq7vqLZyQnP9kYvWyCt8Oh+jJAhxlw5R7X98dz:DL/SQJmJKh0noyCt8OhoJAhXw5R7X989

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/lt.pak

    • Size

      395KB

    • MD5

      c037c0d80be2c913c20e3fe96d9cdaff

    • SHA1

      8dfd2a42fb2e0041d6ac9b90c78b3cad0283c757

    • SHA256

      e7c133a8dc438870f97112587f5f223f5fcae4f1510874b95b72cc281fa150fd

    • SHA512

      0a90dd7d39759e1e63205a827ed6611dc6e54b37c668795123de7f35c446ee41174675a0d813974dba7353c0a1cc4320049d4fd1368cdfccb9cf9afa47fcb4f5

    • SSDEEP

      6144:ExMwGiVqc4anfOfbZnaI+onSzwB74p5Ub04ua7OoMI8Z2IF6SB:lw/M/fBX+onPup5S0MMJP6SB

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/lv.pak

    • Size

      393KB

    • MD5

      b14f9d61e064903bc73d18e40846e1ac

    • SHA1

      5a3da27335194707ffeb07add46662df1fefd76f

    • SHA256

      6e99a3ef823a651f5187c5c549a6885002a2f8523c014f989ec6d53d87e7aac7

    • SHA512

      dab97f5d75d5f60c82969ac01dfc1ffffc0ec5fbe2063c6df0535130ea1432363be1475a440b6075440f68217cd6840a63bcfea0409586d755ff8e57c029baf3

    • SSDEEP

      6144:b3p3yLG9mRNhtVFO6mM7pl44cfX7apaRZ5v4m0cxEl9AC2anpArAFTHVs1C:TpigT87P4467zZ5NEH2ms1C

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/ml.pak

    • Size

      915KB

    • MD5

      fc33673850c17a865cae7695fd3eb5b5

    • SHA1

      72f3241ea35554c881e1849ba53b8f64b04502c1

    • SHA256

      6295eb0b0d05d26b3fdaa19ad390ba30f267b7af7a60a214db558dcdbdb436c4

    • SHA512

      6845293c0cd4ee1aa94972da1d58fd7085da5dd664d4031005200ae38fc4ab20f2c5cf44fe07ff80e003ef072f7f1cb23a452d6ce47124aa1efb3d26ae86b279

    • SSDEEP

      12288:Wq0rekvVG6W+SG7/KgLC4nMmWDcZubSAemNPHVhJ5n/7d597Y3rE:fQel6W+jHsd5n/7V03w

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/nb.pak

    • Size

      332KB

    • MD5

      f15c568a9ed8b2ca497571453ce6bce2

    • SHA1

      957ffec56ce14f33fa75f493936552751e966d16

    • SHA256

      18512064afcc3fb5a0e1f36400e592ff34e8c6c9a7ed0bbe3432255c4759ad8c

    • SHA512

      3bd27f9612b39836e5e7654e6f07c2fd5a31f2c338db36daa51e2c1462986cf4b651d555245ee2e97acd044e44a5beffb8cc9d56c1af11f52fedf9f7fbf7da97

    • SSDEEP

      6144:I9HHvGNQkyLirVh6EQFewqOp7fyyVgLmy07E6SRw5PX4RXODcF:6npqrOEQFewqOp7fyy3ELG5PX4IDcF

    Score
    1/10
    • Target

      AppSetup_Update-Launcher/Data/resources/app.asar

    • Size

      13.8MB

    • MD5

      e2b5f33ee94cfd86c4fb62b33ee55958

    • SHA1

      cec825c811cba9b6c8557760fc83e2db99c08dfe

    • SHA256

      eded44c037661ed32f5585d16a773b9dd99630f4232807a58359bfc1a4984d5e

    • SHA512

      c27641d82c084ffcd86f7fa9faa85c4bfe82683cc02ac3305828feec323f8a2ff631b8394c6b7dd64df9b903454367f373297a6ee0cb939669ffdcdfa7cb66f6

    • SSDEEP

      196608:p2y6eZtDOBjsEHdjQhG/nvTX5YV9cf/Ok:ky6eZNe9jQQ/nLmVGf/b

    Score
    1/10
    • Target

      AppSetup_Update-Launcher/Data/resources/app.asar.unpacked/build/notificationstate.node

    • Size

      106KB

    • MD5

      5d79aff7bc28d3b0c78f0162efdee407

    • SHA1

      98818c05a5310325fd1f8b00537fda50a0c58d91

    • SHA256

      5051d14c3067d856c74f47994ae2ba34f5994477607b5af0ce349f1f6cf8543b

    • SHA512

      c94987d7f450a2e992b946739c9fbac2945ebdda164a4917d00c79086482a02267da433bad710a407a02f8681b33be9069b4d17bf9d32f420a8f7d4d723ef716

    • SSDEEP

      3072:2NSQ5s9mQpnh5A9gdUhvVYL16NAqQoppZS:mvsgQlh5C+UhveLH2pZS

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/resources/app.asar.unpacked/keytar.node

    • Size

      691KB

    • MD5

      c5c99144e2e1589628e14999ba59ad73

    • SHA1

      9c80f8de6b5cdaf38677d5368b5287bacb9e465a

    • SHA256

      90e35de89ab5e5f9290e4ff1bbadcf221a82b2aa0d9b922187dc980adff3c831

    • SHA512

      0bcb99953397c6604d8e08bf2ba89248ee82f92436c2dcc779157b65227b0e1350927273a1b6d150a9db914d0a8830680df05ef651ee291b40657a3025a721c5

    • SSDEEP

      12288:cRInDhSzUpqDDa2XX05VNpk4th460iQlp1Qk5wUFPcvKKR0JQQ8jKOx8:cOnDHpqnaskrdx

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Data/resources/app.asar.unpacked/native/tvdbridge.node

    • Size

      296KB

    • MD5

      e5526203a1a46494f6940c755189321a

    • SHA1

      fe8995c525a41c38ddfadcce065bd5a4f9d6a9cd

    • SHA256

      d849a98540c05e1d0e770bc7d72a5d88213430745acf7aec8ecc246e042d0aad

    • SHA512

      033fa4ba21d8086e516deddac9d25aaa4180b4c341ceb05c1ef9f86a790ebf22a4ee4eb9505da6703cd4309cee1e6be76dbdf4870f0c4d398bababde9facf899

    • SSDEEP

      6144:0MYYj6PQEzvJhuQlVvR+biOSvX3wa5zedaPqhUrYOv:uYj6PbzRhflVZ+dg395zedaPEe

    Score
    3/10
    • Target

      AppSetup_Update-Launcher/Setup.exe

    • Size

      38.9MB

    • MD5

      db97787a82082bbcfd8102e8fb921fb3

    • SHA1

      fe868dfc985cae473d7c24becafffe6336559b1f

    • SHA256

      eb9b8e49c7f13e4ed0d670f40f8c4f1ee379dce9bc376b156d6c5292336f4e80

    • SHA512

      08cf1ac6c7f55ab1af412c70c4feb202106cb1e946f41da5a5c846444c467bebe26a61dc7ecbba3e83c8f2ae1cd7900a8d3997453b5ee88f60f6f66ba1a3b6ce

    • SSDEEP

      786432:AnzMyaT5GtfSEfzIOqUlgFEm/HVpXk6MnYH/CteijCEzUZG7MG5:AzMyYiqAzIPUvmHQhPYGCEzx5

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses 2FA software files, possible credential harvesting

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks

static1

Score
3/10

behavioral1

Score
3/10

behavioral2

Score
3/10

behavioral3

Score
1/10

behavioral4

Score
3/10

behavioral5

Score
3/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

Score
3/10

behavioral23

Score
3/10

behavioral24

Score
3/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
3/10

behavioral32

vidarb89068e4534861e37a204b27184d8ae5discoveryspywarestealer
Score
10/10

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.