Analysis
-
max time kernel
143s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12-10-2023 15:20
General
-
Target
JC_5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97.exe
-
Size
315KB
-
MD5
d08fb132524e824ca66d315b6fb23ea1
-
SHA1
85d6aae899ae56b45a493d6a65edb460d70f75f2
-
SHA256
5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97
-
SHA512
266e78d04fab571a36fc97946736c2c96721344c33d28699d13a5f9fb2b8673229acbb20d3a8ece1e17dfae4c06fa6fc2360e15da2cdc0003eae3d6b7fdf475c
-
SSDEEP
6144:4lJ8wtt/Lod5A0mehi5DGWpmpvcX2Dp7M6Py3OXBjBPTE:43bMbA3SiEbvcX2Dp7V63ORlb
Malware Config
Extracted
vidar
5.6
e881aaf79bbebc43874722496eacba76
https://steamcommunity.com/profiles/76561199550790047
https://t.me/bonoboaz
-
profile_id_v2
e881aaf79bbebc43874722496eacba76
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 OPR/103.0.0.0
Signatures
-
Vidar
Vidar is an infostealer based on Arkei stealer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JC_5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97.exe"C:\Users\Admin\AppData\Local\Temp\JC_5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184KB
-
Filesize
320KB
-
Filesize
636KB
-
Filesize
636KB
-
Filesize
184KB
-
Filesize
320KB
-
Filesize
636KB