General
- Target a8853fac46ff4ac07078f0407c4662ccaa96f3467c736073f544e34933e65725
- Size 190KB
- Sample240417-rl9mysbe53
- SHA256 a8853fac46ff4ac07078f0407c4662ccaa96f3467c736073f544e34933e65725
- MD5 339ddccd6b8b00a299247c95f1b0a6ed
- SHA1 245d0f5660d172f9d2d0e410c4e6f87af3dc8b45
- SHA512 86590d270ef013b3684b542c6cc4c2aba7ef0fdf4bb91e2f66d3c677a89221166bd3e800936adc7efc6f2b7adeb3d13c2c4aac4b65bb67fbc9eb6012967c6710
- SSDEEP 3072:ZriTatJaphbEtHLowlnbRtNS5+uGp60NKIhhAuEGDUMhPFCpAA9nnyMcWBE/QZ/U:ZtapVExLoMtJPp6i/dEGwMlFxMXvJg06
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
17bf11baccfc41056deed1f7658ca2183c34cff636c9372b1ecb812cdb4efea2.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
17bf11baccfc41056deed1f7658ca2183c34cff636c9372b1ecb812cdb4efea2.exe
Resource
win10v2004-20240412-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
8
Botnet
-
b8a5ebfe4a0abceff8d2cd1a6c6c4024
C2
-
https://steamcommunity.com/profiles/76561199644883218
-
https://t.me/neoschats
Attributes
-
profile_id_v2
b8a5ebfe4a0abceff8d2cd1a6c6c4024
-
user_agent
Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78
Targets
-
- Target 17bf11baccfc41056deed1f7658ca2183c34cff636c9372b1ecb812cdb4efea2.exe
- Size 285KB
- SHA256 17bf11baccfc41056deed1f7658ca2183c34cff636c9372b1ecb812cdb4efea2
- MD5 059a930e5f33a348b709f78ffc01e9e4
- SHA1 b0595414e0964aa87d465ae7e5aad105c660e1c4
- SHA512 db1e32f74765ca1eb64b32202cda9a6b4477b2a38729a15ba1e6761c5c38f30d1c44aa9bdbb217df206fa16f6d82c414a00a0f3a52c7e66fcd967887a22041ec
- SSDEEP 6144:13KZKaR+un7/9I/Vlg2Va8eLwC4B6KZf1:1aYMHDUV+LkB62f
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect Vidar Stealer