General
- Target 95b3083f8e10e0c0d140eae906eb5836e617bd0337f170818133e009d2319d49
- Size 185KB
- Sample240417-qqdweaba41
- SHA256 95b3083f8e10e0c0d140eae906eb5836e617bd0337f170818133e009d2319d49
- MD5 7ff78ba2f3e9006a2b24063287c48540
- SHA1 3bc2109d8fa2f78f995ba4ec54dcdce425495bf9
- SHA512 1d0371e6d0980275e0b52308a685cb80555ce7a24ee6acb29e86c8d526b01aaee67a50015f5906dbc8965496a271d15b8b4641da061bcd355edf62a8334c57e1
- SSDEEP 3072:BmOFYaCSXFZKQ2drOaxJjGTczV1q9YOuNmytKK0cWlYFmueUFfnPzC1uoTcgNenh:BmO/CrXTi9wTW+95F/PzIbcgNSjuk
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eb234ba5cceaf5c22e7d59c0d5d6cda995da1129188f47a1c44523ab94f3cb58.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
eb234ba5cceaf5c22e7d59c0d5d6cda995da1129188f47a1c44523ab94f3cb58.exe
Resource
win10v2004-20240412-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
8.6
Botnet
-
22d12fb91f01647fe2107fec81f0cc22
C2
-
https://steamcommunity.com/profiles/76561199658817715
-
https://t.me/sa9ok
Attributes
-
profile_id_v2
22d12fb91f01647fe2107fec81f0cc22
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Targets
-
- Target eb234ba5cceaf5c22e7d59c0d5d6cda995da1129188f47a1c44523ab94f3cb58.exe
- Size 334KB
- SHA256 eb234ba5cceaf5c22e7d59c0d5d6cda995da1129188f47a1c44523ab94f3cb58
- MD5 b90fc46ee52b60b44e0b552a310f5818
- SHA1 a75f11b9998886974f84822d78c6e35dbe5dc1d3
- SHA512 705c5dd2d8f0da0c0344d3b3c9df0096b333bd2b471cba5f30263bde77bcd2e8adc14049b54756dce6df5271c2ab4e5dcf889eb12689774e723d69bdf40d8c10
- SSDEEP 3072:IzMuGzE5XDNJmvXE6m+VUPIiXUJXKu14umGZYnqlYbUecdDMkmz93iKojUwrCTz6:IzMumMfUtcuCjQMkG98bmm2xTF2F
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect Vidar Stealer