Overview

overview

10

Static

static

10

1220-19-0x...ry.exe

windows7-x64

1220-19-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1220-19-0x0000000000400000-0x0000000000657000-memory.dmp

  • Size

    2.3MB

  • Sample

    240911-f7m6asvcrl

  • MD5

    1897983551dac279fb3bd889aaf80b91

  • SHA1

    3dfe49faf7eab72f0d406f0cb23678e9d4a80bad

  • SHA256

    f42220b046e546fb411ff4c2cdb7f0d09668730ec5bfdb8efc068871e1daed08

  • SHA512

    88eed389c92f60fe8acc408af0e06c09d58e2618f2a26bc3cce36f2d06fe51926cb0c9c47a78a2612654478a308c17f493671fb52897ff0bd476c9a3aee7ab14

  • SSDEEP

    3072:4P9MgUTtoTZ01GXNmI4c1xY7kl+cmZWEyCCfFix1NmOq0pkp8gyir9dguFdnm:4FMxKt5XNvzY7kI/CAoP8kbgufn

Score
10/10
vidarstealer

Malware Config

Extracted

Family

vidar

C2

http://147.45.126.10:80

https://t.me/edm0d

https://steamcommunity.com/profiles/76561199768374681
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0

Targets

    • Target

      1220-19-0x0000000000400000-0x0000000000657000-memory.dmp

    • Size

      2.3MB

    • MD5

      1897983551dac279fb3bd889aaf80b91

    • SHA1

      3dfe49faf7eab72f0d406f0cb23678e9d4a80bad

    • SHA256

      f42220b046e546fb411ff4c2cdb7f0d09668730ec5bfdb8efc068871e1daed08

    • SHA512

      88eed389c92f60fe8acc408af0e06c09d58e2618f2a26bc3cce36f2d06fe51926cb0c9c47a78a2612654478a308c17f493671fb52897ff0bd476c9a3aee7ab14

    • SSDEEP

      3072:4P9MgUTtoTZ01GXNmI4c1xY7kl+cmZWEyCCfFix1NmOq0pkp8gyir9dguFdnm:4FMxKt5XNvzY7kI/CAoP8kbgufn

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks