Overview

overview

10

Static

static

10

3a29214c3a...b1.exe

windows7-x64

7

3a29214c3a...b1.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a29214c3a66734c4213be2307f42e30568548e4f0493eb246be3cdc1345ceb1.exe

  • Size

    5.2MB

  • MD5

    9c49281d063296a545c79bf288d4c3bf

  • SHA1

    403babf2b5811ba796517ce45235d261ad858620

  • SHA256

    3a29214c3a66734c4213be2307f42e30568548e4f0493eb246be3cdc1345ceb1

  • SHA512

    373554c2a6fc6625a0f0154cb17d15bc08117002d95f0c477e0646d44eceb6e9b2ac24f871bd5b402e06db2b9feb7e54379b1b9671c8e5bed2b1e7368591eda0

  • SSDEEP

    98304:Q4Po4Zx7ojYK3zPfNsnigfraV3/x21RNPa9SeR7Tf8J1Q+SS5/nO8:QOxkMK3zPCniYGV48eSS5vO8

Score
10/10
stealer22857ff23603709764e7e7e3e4fd64bfvidar

Malware Config

Extracted

Family

vidar

Version

10.8

Botnet

22857ff23603709764e7e7e3e4fd64bf

C2

https://steamcommunity.com/profiles/76561199761128941

https://t.me/iyigunl
Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36

Signatures

  • Detect Vidar Stealer 1 IoCs
    stealer
  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a29214c3a66734c4213be2307f42e30568548e4f0493eb246be3cdc1345ceb1.exe
    .exe windows:5 windows x86 arch:x86

    7b5a8d7a6a007050bb3907e879153095


    Headers

    Imports

    Sections