General
- Target 3236459655ba0fe656a0315ff00f61c1f8f853ae73347abf8bccc630a044774b.zip
- Size 185KB
- Sample240402-msmdsafe7s
- SHA256 f1fb3e3d932598386750061c2e247acff7a1a5df55d9930c10aeab52907d0eef
- MD5 7b4b82b151b50ce30c94264f24364ddd
- SHA1 376427de0100d8c1093ca4b948aaf5bec48c700c
- SHA512 fd4db30d020486b23a2f6ae46aeaa81e96f0016c141fcef157777698e4f45e61a448ae7590116389557cf0b79b64b128100c0c53510ad72d8a3b89644861667e
- SSDEEP 3072:vU9tH75i04kB/DF9TLWqyA0CGgwrElMDW5jBkWyMV6hGNqNI+WucA7CbDAS1HMSq:vg8kTWqyA0CGho66Bk/xDNI+zcAtS1Hw
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3236459655ba0fe656a0315ff00f61c1f8f853ae73347abf8bccc630a044774b.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
3236459655ba0fe656a0315ff00f61c1f8f853ae73347abf8bccc630a044774b.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
8.6
Botnet
-
22d12fb91f01647fe2107fec81f0cc22
C2
-
https://steamcommunity.com/profiles/76561199658817715
-
https://t.me/sa9ok
Attributes
-
profile_id_v2
22d12fb91f01647fe2107fec81f0cc22
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Targets
-
- Target 3236459655ba0fe656a0315ff00f61c1f8f853ae73347abf8bccc630a044774b.exe
- Size 331KB
- SHA256 3236459655ba0fe656a0315ff00f61c1f8f853ae73347abf8bccc630a044774b
- MD5 5f6e3dda73b232eaa8792f5880b6a90c
- SHA1 5a51c5aa0cc796d0d5d6c530dc99f0fb81d37a7a
- SHA512 c7bc42aca05d473f68d9eace4b61e18d3041b89af3ea60679466dd142b53efae698e5232389adcd933cb8a312a58de59e1bfc642322ed9d41e57ac5780e51084
- SSDEEP 3072:+lMaCCfSxZQTu+lliXOOS5rO3LBCZcJOIgB/50+IaUnoHyKnD7oTk6pfApTxe+FG:+lpM9HORot4wO5/K+owyKnDTEOT0+FG
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect Vidar Stealer