Overview

overview

10

Static

static

10

2428-8-0x0...ry.exe

windows7-x64

10

2428-8-0x0...ry.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    20-09-2024 12:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2428-8-0x0000000000400000-0x0000000000675000-memory.exe

  • Size

    2.5MB

  • MD5

    a7668add551583141c9c57f0e8d0b4b4

  • SHA1

    a99082cffd682fd1a58d8969eae072cbf00d2734

  • SHA256

    3b8b95ceb5f5f0d95937565b62ca4c71cf9be652d391981cd55005a1c162029c

  • SHA512

    a33b49460b262fcb4b7095820aebff02e1581643cdea8a3fc3441e8fc8a6f705f2e9b663283cba7bb21ba27474e6076da54e2f71a611f856577143cd220db26c

  • SSDEEP

    3072:UXLzJjK+C+xc+CrwCsRMr6C5rBYBYwG8cmJAFMaq3A171J4Pq0/jp8gyiOM:MLFjK+NxcLnsRMr6cYBYw8vq448p

Score
10/10
vidarb438a316528fda660b5e4e28911b77a1stealer

Malware Config

Extracted

Family

vidar

Version

11

Botnet

b438a316528fda660b5e4e28911b77a1

Signatures

  • Detect Vidar Stealer 1 IoCs
    stealer
  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

Processes

  • C:\Users\Admin\AppData\Local\Temp\2428-8-0x0000000000400000-0x0000000000675000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2428-8-0x0000000000400000-0x0000000000675000-memory.exe"
    1⤵
      PID:880

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/880-0-0x0000000000400000-0x0000000000675000-memory.dmp

      Filesize

      2.5MB

      Download