Overview

overview

10

Static

static

10

1052-183-0...ry.exe

windows7-x64

10

1052-183-0...ry.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07-10-2024 14:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1052-183-0x0000000005FF0000-0x0000000006266000-memory.exe

  • Size

    2.5MB

  • MD5

    e168ffbbd6fecd6ab12321f21028890e

  • SHA1

    ee128642cf3a3eaea5bfb65015cbbc42a3adfd50

  • SHA256

    b09cb2d37f5b4be0e3f2276c7b45de1a38b4c9dc2cb8afc7382884a0325b80f5

  • SHA512

    e596768d0e912017625f48457c4930e3b62a92f6fc7668a57d62f49841a9a83b8eb7de79009bf104dcf8eee71a042cb5607ec9431ab9c34e61a3b06c34d24a11

  • SSDEEP

    12288:sbRVMP+YSGGkNs0Ix6BY/sCVJFEbtQIWmd:sboP+bGGkNKU3C30z

Score
10/10
vidarstealer

Malware Config

Signatures

  • Detect Vidar Stealer 1 IoCs
    stealer
  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

Processes

  • C:\Users\Admin\AppData\Local\Temp\1052-183-0x0000000005FF0000-0x0000000006266000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1052-183-0x0000000005FF0000-0x0000000006266000-memory.exe"
    1⤵
      PID:572

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/572-0-0x0000000000400000-0x0000000000676000-memory.dmp

      Filesize

      2.5MB

      Download