General
-
Target
7debc473f9ec83c3d000a57466eab9b2.bin
-
Size
95KB
-
Sample
240708-d1pdnssepf
-
MD5
7c6e85f1e38b1ec50d405df0156239d1
-
SHA1
b3ede46c28872b57f5ae2d8c5c1aaec97e6478fd
-
SHA256
6b7f8069ebfedb0c90f87181afb33e254c09f8188c7293c7012d24a7337ff148
-
SHA512
61e044cea8220cfe3a349ed4e4d9e1e9bf0c4a1d1232fc96a6080f4d36382cee2e55f3f136365c8ba5e111ac2bef6918e37f173d2e2fdb43d60e7d50247699f9
-
SSDEEP
1536:0OgWmjl8SqJ8fg8AwAj9n5rCQac63VjzrneBWGkdLVSJRqGEEvTrw5x8+:07WRSA8g8Awo5rmPjnneBW/hV+v0x8+
Behavioral task
behavioral1
Sample
177522949060fb57da49ff445edd38f2fef86c30d86603b3438b874635fbde01.exe
Resource
win7-20240704-en
Malware Config
Extracted
vidar
https://t.me/bu77un
https://steamcommunity.com/profiles/76561199730044335
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.1) Gecko/20100101 Firefox/128.1
Targets
-
-
Target
177522949060fb57da49ff445edd38f2fef86c30d86603b3438b874635fbde01.exe
-
Size
206KB
-
MD5
7debc473f9ec83c3d000a57466eab9b2
-
SHA1
5dbb4eff8d72becf6d4050a97907a07190e4f6db
-
SHA256
177522949060fb57da49ff445edd38f2fef86c30d86603b3438b874635fbde01
-
SHA512
b6afa39d0ec0bfe7ca626b8952b6a605e4b79476539cd238cc03bac17b42ecd4b420cf34fb2c74cf1557008baa5e32cb876031e1a930875b78162331fbc4dad9
-
SSDEEP
3072:1TQm3axZbvWtCyEwVt2IUE5iujhGzCLEoFreNsagz6p9ufGol:mmqHbv+EwiIf5ykEoFlMufG
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-