General
-
Target
f714adc256ed7b0d48a50c9b10d0db1d6285541801e720569c86fceeba072697.zip
-
Size
226KB
-
Sample
240402-msph5sga77
-
MD5
4ad629ec869e7aa797ff6f3c9796a0f9
-
SHA1
ea298d3ea74f5b4465b8dab9a6a5ca4db0afb00f
-
SHA256
fd4163a59ed25d454d7cbfc052f17ed9fdc7884efb0f63d719721e03fa848bb3
-
SHA512
b83def0724053d22aab70dd97ba4fe841f3eca8c7a6bba156f682812c2c7f7f0b6cac51ad3ea6124ad811fe46132eeac1c4a8140d27c6f062cca4ffac14ecfbe
-
SSDEEP
6144:7IVhBwM5BHP81SASeF6kvtO+Oz+aCtGpkhao2KqGfP+DbAz:8VnXDf6VO+2zkhzRqGfPsq
Static task
static1
Behavioral task
behavioral1
Sample
f714adc256ed7b0d48a50c9b10d0db1d6285541801e720569c86fceeba072697.exe
Resource
win7-20240319-en
Malware Config
Extracted
vidar
https://steamcommunity.com/profiles/76561199658817715
https://t.me/sa9ok
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Targets
-
-
Target
f714adc256ed7b0d48a50c9b10d0db1d6285541801e720569c86fceeba072697.exe
-
Size
238KB
-
MD5
0ce3dc374e49433d7e15d02c015e0ee3
-
SHA1
71882bb02d1fa7b4a0f824afdcc1cd53bdb85ba1
-
SHA256
f714adc256ed7b0d48a50c9b10d0db1d6285541801e720569c86fceeba072697
-
SHA512
a68b25bd8170205d491f3409393757eda6ec4c2b7f31e985b57a8d5fe9e876264167d2228087c6645ebd6dee6522386f9e39e631e6a7f06783f401432df730fa
-
SSDEEP
6144:hABBPmUqO791Ou5dscGTGnbpZfcATrKTJJzM5E:hABBOa90uzVWGlRmTJX
-
Detect Vidar Stealer
-
Suspicious use of SetThreadContext
-