General
-
Target
58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff.zip
-
Size
223KB
-
Sample
240402-qgndgsbc36
-
MD5
a1bf1725b27ab6482cebaea6fc11dd43
-
SHA1
f8c0c24b6a25901f5d17f235d3cbedc1a018ced3
-
SHA256
49c792def342179b4dc99d3736d5eeacbeaf9d2753b68165391f4f63fe888148
-
SHA512
4a5e7f609585a4e34d0bceeb7446c47ca2c64e5d1837e1c2eb6abe8defe5f7ff7d49411357abd603e1ae3908baaf86a60b426a4fed7c2236825cb08ab9d9db63
-
SSDEEP
3072:mPzdeQlYY/R9SsvuZRQD5qGw0qGMMOQ1EMs/7CVcyLSgvaB17NSKFpTPvu1X4f:afYY/RMguZR8Auu/7MFFa77cKXTPQQ
Static task
static1
Behavioral task
behavioral1
Sample
58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff.exe
Resource
win7-20240221-en
Malware Config
Extracted
vidar
https://steamcommunity.com/profiles/76561199658817715
https://t.me/sa9ok
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Targets
-
-
Target
58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff.exe
-
Size
234KB
-
MD5
d0492d61a010c75b69a21b31761ac655
-
SHA1
0168759aebd253fed1dd89a44d260f6eadc94a2d
-
SHA256
58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff
-
SHA512
e4552a5bcf7f6b7911a87873d6d168d44f4ab0f351c822b5ec3b14b5db359ce0fadecac7bc032111197243b79047cbe1203e4fa9afc558c9f9e2a0ecb28eb52d
-
SSDEEP
6144:AhAZ0mc86LHVUCAlfzHORKOrfIrIEgcNxHookuvxNimwE5R:ImcJLHVpAl7o3rfwrYt+7/r
-
Detect Vidar Stealer
-
Suspicious use of SetThreadContext
-