General
- Target b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.zip
- Size 185KB
- Sample240402-mevs1afc58
- SHA256 7fb9b8eb401dd64ade14f83845649374bf06c641014e13271948f5bb3d130eb5
- MD5 5bf9c7470f92b8fe5034df6d2c1b4c97
- SHA1 ed644d49677878771e5d8aab813d9a1685eb0061
- SHA512 591baa42d5996db51f37a0a0e98e125f6be27e1ec74cb4cf2625b71292cddbb670686a3b96f9d1a1998da3acaf846262451ce0df796bb9e46dca57476d1e0dd2
- SSDEEP 3072:1pha3yZL3BsOvjtmPQXm4MSLLTCCcM80AaVaZvRIkPy1ezySnpg44VCwWQ6lOQ:1hZL3BPbtY4MOTyvyeRICNz7pgtPbQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
8.6
Botnet
-
22d12fb91f01647fe2107fec81f0cc22
C2
-
https://steamcommunity.com/profiles/76561199658817715
-
https://t.me/sa9ok
Attributes
-
profile_id_v2
22d12fb91f01647fe2107fec81f0cc22
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Targets
-
- Target b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe
- Size 333KB
- SHA256 b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7
- MD5 ad6b08e137914d35aa22d05a0079e081
- SHA1 011e041e6b08d16e64cd42521ad5334ad40fb9b1
- SHA512 714942846cb36bb9c5ec155defabee7e044fc667e450c9ae45bac317318cf7fd5e578ee298883e3492ba254b0390a67f1b0473c7f6158dd93a338dac8525702f
- SSDEEP 3072:L0XldAwWvDl/VF31+uoiXf8HVDYjjEQayL1ww3pUweEKLVamTsTwXULfpTRZfFHg:LcduFHfcYIs1D3BeBaGsTrLhTRZfF
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect Vidar Stealer