General
- Target b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.zip
- Size 185KB
- Sample240402-msnlvafe71
- SHA256 24e8f7995fad42276057ef8883912aaff8ccbc4189dd0aad97eecc3d30069ac0
- MD5 79de4275cdba5be70d65d1d0c2449b01
- SHA1 eead69fe299454d2ca626e6229616d456adc91d7
- SHA512 27ccf76ea22d1c5b0cc4aef8c951952f25a8bbe9059940cb822987ee835561ddf48e2de7f9db10b1e8081fde3ec50761b269cc07f8ed4b3ff1726dbbb92219c6
- SSDEEP 3072:Ak9/5zsMHQIfCz3lLuG5z/dy9KSIjp+85sXUmRsDFjUHgsXYNizT/wnqP/NgOe:A85zsMwd1jz/gJ8a2tUH2NiXwqPBe
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe
Resource
win7-20240215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
8.6
Botnet
-
22d12fb91f01647fe2107fec81f0cc22
C2
-
https://steamcommunity.com/profiles/76561199658817715
-
https://t.me/sa9ok
Attributes
-
profile_id_v2
22d12fb91f01647fe2107fec81f0cc22
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Targets
-
- Target b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe
- Size 333KB
- SHA256 b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7
- MD5 ad6b08e137914d35aa22d05a0079e081
- SHA1 011e041e6b08d16e64cd42521ad5334ad40fb9b1
- SHA512 714942846cb36bb9c5ec155defabee7e044fc667e450c9ae45bac317318cf7fd5e578ee298883e3492ba254b0390a67f1b0473c7f6158dd93a338dac8525702f
- SSDEEP 3072:L0XldAwWvDl/VF31+uoiXf8HVDYjjEQayL1ww3pUweEKLVamTsTwXULfpTRZfFHg:LcduFHfcYIs1D3BeBaGsTrLhTRZfF
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect Vidar Stealer