Overview

overview

10

Static

static

10

4632-99-0x...ry.exe

windows7-x64

4632-99-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4632-99-0x0000000000400000-0x0000000000657000-memory.dmp

  • Size

    2.3MB

  • Sample

    240911-gbb9lavenm

  • MD5

    453ddb1e753dbaaa11db54392dc6196b

  • SHA1

    1a9edc36d00d507b7682e51802b6091880c8e11b

  • SHA256

    e96c8fb1d0e39d5c90638c62936672b29df86b095844d646929141ef5cf4deb5

  • SHA512

    c888983f8c89f75f7ca737d133402cf95fb65379c23ede87027daf10b7c06a112c1076f65d1a7cea060612180b5802e1a1042ee85c0bdf5a602d5b69a7ab0993

  • SSDEEP

    3072:4P9MgUTtoTZ01GXNmI4c1xY7kl+cmZWEyCCfFix1NmVq0pkp8gyir9dguFdnm:4FMxKt5XNvzY7kI/CApP8kbgufn

Score
10/10
vidarstealer

Malware Config

Extracted

Family

vidar

C2

http://147.45.126.10:80

https://t.me/edm0d

https://steamcommunity.com/profiles/76561199768374681
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0

Targets

    • Target

      4632-99-0x0000000000400000-0x0000000000657000-memory.dmp

    • Size

      2.3MB

    • MD5

      453ddb1e753dbaaa11db54392dc6196b

    • SHA1

      1a9edc36d00d507b7682e51802b6091880c8e11b

    • SHA256

      e96c8fb1d0e39d5c90638c62936672b29df86b095844d646929141ef5cf4deb5

    • SHA512

      c888983f8c89f75f7ca737d133402cf95fb65379c23ede87027daf10b7c06a112c1076f65d1a7cea060612180b5802e1a1042ee85c0bdf5a602d5b69a7ab0993

    • SSDEEP

      3072:4P9MgUTtoTZ01GXNmI4c1xY7kl+cmZWEyCCfFix1NmVq0pkp8gyir9dguFdnm:4FMxKt5XNvzY7kI/CApP8kbgufn

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks