General
- Target file.exe
- Size 283KB
- Sample240227-veh37sed66
- SHA256 18bfd6d95614bf5bb1adf900a7146aadcf419ea168c1589d456e7a062efc1d55
- MD5 ffaa7f773575bc0a6246cc6e6dc419d3
- SHA1 7b9f484ddbd111d67a5493ea19afcbeb8537946b
- SHA512 0532691e87fe9e6720f412bf77f5b398a32a729f55d558993569cf51aec6c891f5f81ede17165fa3e0216029945d6f9050d45888daeb3e3e2cf1e942c8e588ad
- SSDEEP 3072:IFzbu81/cgwkL5Gv5HVALhPVnBj4XGnqqGIJt/ziEpm2wZcGXP6Bl5Ks7xf/BG:kZdwkdkpWBjKkPJYum2tuSBiUx
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
8
Botnet
-
ab8ba484d8a6c9be7d043c05bea0aa9f
C2
-
https://t.me/neoschats
-
https://steamcommunity.com/profiles/76561199644883218
Attributes
-
profile_id_v2
ab8ba484d8a6c9be7d043c05bea0aa9f
-
user_agent
Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78
Targets
-
- Target file.exe
- Size 283KB
- SHA256 18bfd6d95614bf5bb1adf900a7146aadcf419ea168c1589d456e7a062efc1d55
- MD5 ffaa7f773575bc0a6246cc6e6dc419d3
- SHA1 7b9f484ddbd111d67a5493ea19afcbeb8537946b
- SHA512 0532691e87fe9e6720f412bf77f5b398a32a729f55d558993569cf51aec6c891f5f81ede17165fa3e0216029945d6f9050d45888daeb3e3e2cf1e942c8e588ad
- SSDEEP 3072:IFzbu81/cgwkL5Gv5HVALhPVnBj4XGnqqGIJt/ziEpm2wZcGXP6Bl5Ks7xf/BG:kZdwkdkpWBjKkPJYum2tuSBiUx
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect Vidar Stealer