General
- Target file
- Size 234KB
- Sample240330-wecf4abf76
- SHA256 059f83868e7063b70bb6a36a7a9a618a4b3887c4dce94cc713d400e45b2337b5
- MD5 436bd90a95f5ff01c7c05c83935a3c31
- SHA1 1389f2152a7107952b12e547078eee5ed8ad9839
- SHA512 2d26c6a202f973d5f1d71b9f8ef0af348082c1429034e374473663cc965f23e72844ea0c560fe57dc03e2cbca8eef2a411989aac2ee8e47e95fa5bd7199525db
- SSDEEP 6144:cwhV2xyQSlM/KsQRz7/ssEZATM8YSU1sIAQ:cwD2t/bQ52wQ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
C2
-
https://steamcommunity.com/profiles/76561199658817715
-
https://t.me/sa9ok
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Targets
-
- Target file
- Size 234KB
- SHA256 059f83868e7063b70bb6a36a7a9a618a4b3887c4dce94cc713d400e45b2337b5
- MD5 436bd90a95f5ff01c7c05c83935a3c31
- SHA1 1389f2152a7107952b12e547078eee5ed8ad9839
- SHA512 2d26c6a202f973d5f1d71b9f8ef0af348082c1429034e374473663cc965f23e72844ea0c560fe57dc03e2cbca8eef2a411989aac2ee8e47e95fa5bd7199525db
- SSDEEP 6144:cwhV2xyQSlM/KsQRz7/ssEZATM8YSU1sIAQ:cwD2t/bQ52wQ
- MD5 SHA1 SHA512 SSDEEP
-
Detect Vidar Stealer
-
Suspicious use of SetThreadContext