General
-
Target
946e133ab8f86b5f868e1217779f35004e27b3c79f0dd70c6d85756a85ea2e22
-
Size
148KB
-
Sample
240417-qnrdqaah41
-
MD5
c0605507bbe61322e9084821091d6bb8
-
SHA1
263ff299baa103ae15c7750f143f640c49f5b47d
-
SHA256
946e133ab8f86b5f868e1217779f35004e27b3c79f0dd70c6d85756a85ea2e22
-
SHA512
a2db369aaaeeb14d4c04eb7420a2601c93a9ff8095c5d8266228956fde2ab97c30c4878227e32e593957b7a4601f2f1fabf5c2c1aa98f5051cb3e230d322d0bf
-
SSDEEP
3072:ATEAhBslxBcIIQtjSVyZQCFJ6//ZsAE1p1VXabrkPsRnGsPxAJZs:4EA7sVIQtjSa16nZsPD1VVgfx4G
Static task
static1
Behavioral task
behavioral1
Sample
bd442895a10c0b01daa543174c33d31ed05b905af2c6f5ab56c709893b1eed34.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd442895a10c0b01daa543174c33d31ed05b905af2c6f5ab56c709893b1eed34.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
vidar
6.4
181eb512368c942704e3ada53738a1d7
https://t.me/secgoxrp
https://steamcommunity.com/profiles/76561199568528949
-
profile_id_v2
181eb512368c942704e3ada53738a1d7
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0
Targets
-
-
Target
bd442895a10c0b01daa543174c33d31ed05b905af2c6f5ab56c709893b1eed34.exe
-
Size
253KB
-
MD5
34c857dbfb1d5b7e53c67979560a10ad
-
SHA1
7cbb6cb95f3dce4a0da66ea4e4eadfba74031435
-
SHA256
bd442895a10c0b01daa543174c33d31ed05b905af2c6f5ab56c709893b1eed34
-
SHA512
323f2feda71928e600a6cf53dd5c446ce7ad1c661a353ff7f02f9fdca24a35c19d18f9cc34325197947abca984e958d115cbf71b3c4d7e9f668834f46e7009d6
-
SSDEEP
3072:RSd6WKzEFwzwoCaYFhn3x2uCGDsZcjua1SvenwVveM2fPZfPLsO2I:IdUWopCauFCIsguknW8hl
-
Detect Vidar Stealer
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-