General
- Target file.exe
- Size 210KB
- Sample240301-ldly2aeh9t
- SHA256 a6f08a3f8e1a8c2bbc982aaa662992c1d7400443e474f622d682d38ed7148d6c
- MD5 57359f1a71b3c9f2e76631a70fc99aaf
- SHA1 8f11248f7e18e8196d1bad3b00d17d22149ecf05
- SHA512 feda82b26dd483e9b6f1c4be35b23d4c011dbe3403f39beb4368fe62d07d4f2b16f80546ef49597766b1e86f8a03076efcab8f7b5cdf51b087a91e56a95754f3
- SSDEEP 3072:uDineOw9UM7uGMjlXSDDG17S+/uD/jrumkLa7rIzHInk2Sv1fo:rneOGUrlyG12qQ/MzoVm
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
8
Botnet
-
438c7562661d92141bb0adbe01c2fc5f
C2
-
https://steamcommunity.com/profiles/76561199644883218
-
https://t.me/neoschats
Attributes
-
profile_id_v2
438c7562661d92141bb0adbe01c2fc5f
-
user_agent
Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78
Targets
-
- Target file.exe
- Size 210KB
- SHA256 a6f08a3f8e1a8c2bbc982aaa662992c1d7400443e474f622d682d38ed7148d6c
- MD5 57359f1a71b3c9f2e76631a70fc99aaf
- SHA1 8f11248f7e18e8196d1bad3b00d17d22149ecf05
- SHA512 feda82b26dd483e9b6f1c4be35b23d4c011dbe3403f39beb4368fe62d07d4f2b16f80546ef49597766b1e86f8a03076efcab8f7b5cdf51b087a91e56a95754f3
- SSDEEP 3072:uDineOw9UM7uGMjlXSDDG17S+/uD/jrumkLa7rIzHInk2Sv1fo:rneOGUrlyG12qQ/MzoVm
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect Vidar Stealer