General
-
Target
file.exe
-
Size
2.4MB
-
Sample
240424-j2pzgsfh56
-
MD5
03d4cbe07cb7f2229a20cd1400815089
-
SHA1
8d10fcea9cc88859920c8b8cfd5000828a47bc78
-
SHA256
7f92d23e392f6c18a682adfe0b7df82d2972983be07d6844554b1025aa39a503
-
SHA512
00096c9e15b5a7a30c5df078108aecee9a3b2cb2f174a1338d8fc73dce53bfad18fe2a42201d748431a88b2eb73e9500e7ba4baf194cfc1f1fb509ebae479ee5
-
SSDEEP
49152:ut+26SUso+VyvmHcxs2t5lF6zZ+kAoSEfvOF0aomdCD00SeLvnh:urUz+Vyvm32xFctmF0qdG00Sinh
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240221-en
Malware Config
Extracted
vidar
https://steamcommunity.com/profiles/76561199673019888
https://t.me/irfail
-
user_agent
Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/115.0
Targets
-
-
Target
file.exe
-
Size
2.4MB
-
MD5
03d4cbe07cb7f2229a20cd1400815089
-
SHA1
8d10fcea9cc88859920c8b8cfd5000828a47bc78
-
SHA256
7f92d23e392f6c18a682adfe0b7df82d2972983be07d6844554b1025aa39a503
-
SHA512
00096c9e15b5a7a30c5df078108aecee9a3b2cb2f174a1338d8fc73dce53bfad18fe2a42201d748431a88b2eb73e9500e7ba4baf194cfc1f1fb509ebae479ee5
-
SSDEEP
49152:ut+26SUso+VyvmHcxs2t5lF6zZ+kAoSEfvOF0aomdCD00SeLvnh:urUz+Vyvm32xFctmF0qdG00Sinh
-
Detect Vidar Stealer
-
Detect ZGRat V1
-
Suspicious use of SetThreadContext
-