Overview

overview

10

Static

static

10

d649524fba...66.exe

windows7-x64

3

d649524fba...66.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d649524fba7b0571351c386359e13228781700def5904eed2c2455e15b2afd66.exe

  • Size

    205KB

  • MD5

    baa9e1a92bab85279dca0aed641f1fa9

  • SHA1

    e26721107dce1355b8ecc71b457543b25ceab823

  • SHA256

    d649524fba7b0571351c386359e13228781700def5904eed2c2455e15b2afd66

  • SHA512

    f0f4d1ac701be8ee45b60f2a11d8831b8f53da73a55eeaed08b76cf0b544fc89ae515c5cf8082d67d94c4437b5b4337c6d9f501a25fd45bb3064a00fe0150e80

  • SSDEEP

    6144:nuK5eoxptUTQpbQm3HACLGWyitsmrAwp63:/jptUT8bQcHZLki6mrAwpo

Score
10/10
stealerf624ecb4a0335cf66bf78da0cad7ec5cvidar

Malware Config

Extracted

Family

vidar

Version

8.8

Botnet

f624ecb4a0335cf66bf78da0cad7ec5c

C2

https://ndearn.xyz

https://steamcommunity.com/profiles/76561199662282318

https://t.me/t8jmhl
Attributes
  • profile_id_v2

    f624ecb4a0335cf66bf78da0cad7ec5c

  • user_agent

    Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) AppleWebKit/534.6 (KHTML, like Gecko) Chrome/8.0.500.0 Safari/534.6

Signatures

  • Detect Vidar Stealer 1 IoCs
    stealer
  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d649524fba7b0571351c386359e13228781700def5904eed2c2455e15b2afd66.exe
    .exe windows:5 windows x86 arch:x86

    891374ed5eda1ba6357d859b0a0690ed


    Headers

    Imports

    Sections