General
-
Target
6198158ab3aa4dd99bcc1fe230ff7539
-
Size
465KB
-
Sample
240117-dqbptsffbp
-
MD5
6198158ab3aa4dd99bcc1fe230ff7539
-
SHA1
af80ebc9ed1102f91a9601d35a92a342331b9be1
-
SHA256
df5e1feaf7fe114c30d33a01af6d9e70f89a33d6384158a58d026a7c13908915
-
SHA512
da6f52245dbeb31cbf56e461b59cada5ecef1aef4feee8f27a131118cef05092700be806338666c7285e0805fe8a855871143b73739cb0378be8d99a5b5e6ff7
-
SSDEEP
12288:QggkmrTGAkZsQ8Rg6I/F4l0EbO0/lAFeFMy2:QggkGTGbZBCg6I/F808OWlu7f
Static task
static1
Behavioral task
behavioral1
Sample
6198158ab3aa4dd99bcc1fe230ff7539.exe
Resource
win7-20231215-en
Malware Config
Extracted
vidar
28.7
237
http://freroxhottov.com/
-
profile_id
237
Targets
-
-
Target
6198158ab3aa4dd99bcc1fe230ff7539
-
Size
465KB
-
MD5
6198158ab3aa4dd99bcc1fe230ff7539
-
SHA1
af80ebc9ed1102f91a9601d35a92a342331b9be1
-
SHA256
df5e1feaf7fe114c30d33a01af6d9e70f89a33d6384158a58d026a7c13908915
-
SHA512
da6f52245dbeb31cbf56e461b59cada5ecef1aef4feee8f27a131118cef05092700be806338666c7285e0805fe8a855871143b73739cb0378be8d99a5b5e6ff7
-
SSDEEP
12288:QggkmrTGAkZsQ8Rg6I/F4l0EbO0/lAFeFMy2:QggkGTGbZBCg6I/F808OWlu7f
-
Vidar Stealer
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-