General
- Target file.exe
- Size 327KB
- Sample240418-mntbjaae75
- SHA256 3207e4d698ac64dd7c30c1e1ce6247b6e2099e408f36832768cac8f3d7c36942
- MD5 1cd2b133df1c0e1ace31e5ebd4622001
- SHA1 ac9a2288a9f51daac2c9008ad91308aa63cacb2c
- SHA512 57442da5248b22b9ec009ec118c2677f1979c978bd1ce77399206aed72e932a93ca98ca9784b375d7bdd07f6050b23d26f7a08c38952a1017cb15d262a682b85
- SSDEEP 6144:fOLuCdfiVOMD4RKfCzVmc39hQQeUd3O4RPrGe5pic5WHwk4pQ:fOLufOszU5JqiWHH4pQ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20231129-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
C2
-
https://steamcommunity.com/profiles/76561199673019888
-
https://t.me/irfail
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/115.0
Targets
-
- Target file.exe
- Size 327KB
- SHA256 3207e4d698ac64dd7c30c1e1ce6247b6e2099e408f36832768cac8f3d7c36942
- MD5 1cd2b133df1c0e1ace31e5ebd4622001
- SHA1 ac9a2288a9f51daac2c9008ad91308aa63cacb2c
- SHA512 57442da5248b22b9ec009ec118c2677f1979c978bd1ce77399206aed72e932a93ca98ca9784b375d7bdd07f6050b23d26f7a08c38952a1017cb15d262a682b85
- SSDEEP 6144:fOLuCdfiVOMD4RKfCzVmc39hQQeUd3O4RPrGe5pic5WHwk4pQ:fOLufOszU5JqiWHH4pQ
- MD5 SHA1 SHA512 SSDEEP
Detect Vidar Stealer
Suspicious use of SetThreadContext