Overview

overview

10

Static

static

10

2332-3-0x0...ry.exe

windows7-x64

2332-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2332-3-0x0000000000400000-0x00000000022E4000-memory.dmp

  • Size

    30.9MB

  • MD5

    8a0b3225639485f4cc2d4ef3f9625cba

  • SHA1

    6ff4914eca7c1077e742205aa363773ab78226ac

  • SHA256

    62215d3e33e97424f5521d4136999329f14ec67cd3692e2d95e1230de5bbac26

  • SHA512

    4589027c8f010fcaa3852974e8526290180d32dda576f680b5d6358b642ece4f47819d222ba7ff51a41b2b9edb7522581b03b94b3f1490931d9a2e13d2670261

  • SSDEEP

    3072:c7AkGT31oD0yJWwIBuqzIOS8EKtck4I/jnItFoLG+1vDMc4wt8ERlJ7K34MboZV:c0kKo4yxIoqUOnUk4GItSD206ooQlG

Score
10/10
stealerb8a5ebfe4a0abceff8d2cd1a6c6c4024vidar

Malware Config

Extracted

Family

vidar

Version

8

Botnet

b8a5ebfe4a0abceff8d2cd1a6c6c4024

C2

https://steamcommunity.com/profiles/76561199644883218

https://t.me/neoschats
Attributes
  • profile_id_v2

    b8a5ebfe4a0abceff8d2cd1a6c6c4024

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Signatures

  • Detect Vidar Stealer 1 IoCs
    stealer
  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2332-3-0x0000000000400000-0x00000000022E4000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections