General
-
Target
059f83868e7063b70bb6a36a7a9a618a4b3887c4dce94cc713d400e45b2337b5.zip
-
Size
223KB
-
Sample
240402-qxagkabg7z
-
MD5
e649f272ba5a6eab9ab451d072d24a0e
-
SHA1
995b5107a378ee57464b2f992e4555681cd875f0
-
SHA256
4bfdefe43f868ab17dc60703996a07d0b7242a47108fdca847563d6810ff9897
-
SHA512
6f03997ebca5b16886a86c7d71d0f01dee42434039004c02d3bbac9fae4a468afe51760935b18084f0968c7768a3370b3741bf56a717ad312c427b3495b746cb
-
SSDEEP
6144:liUlnfHrvzJ0SEgjkrnboVVBsYnsZEQcIfcLOfNVIiQ:liELN0ShicVaYGEQPHP1Q
Static task
static1
Behavioral task
behavioral1
Sample
059f83868e7063b70bb6a36a7a9a618a4b3887c4dce94cc713d400e45b2337b5.exe
Resource
win7-20240221-en
Malware Config
Extracted
vidar
https://steamcommunity.com/profiles/76561199658817715
https://t.me/sa9ok
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Targets
-
-
Target
059f83868e7063b70bb6a36a7a9a618a4b3887c4dce94cc713d400e45b2337b5.exe
-
Size
234KB
-
MD5
436bd90a95f5ff01c7c05c83935a3c31
-
SHA1
1389f2152a7107952b12e547078eee5ed8ad9839
-
SHA256
059f83868e7063b70bb6a36a7a9a618a4b3887c4dce94cc713d400e45b2337b5
-
SHA512
2d26c6a202f973d5f1d71b9f8ef0af348082c1429034e374473663cc965f23e72844ea0c560fe57dc03e2cbca8eef2a411989aac2ee8e47e95fa5bd7199525db
-
SSDEEP
6144:cwhV2xyQSlM/KsQRz7/ssEZATM8YSU1sIAQ:cwD2t/bQ52wQ
-
Detect Vidar Stealer
-
Suspicious use of SetThreadContext
-