General
-
Target
a4912840dc1b7230bfd9c89631995da481d23039e0b55905657d5f312bc48a2e
-
Size
598KB
-
Sample
241010-aecwzaxdpr
-
MD5
f10e80c2063428382e5c2571e4ff37aa
-
SHA1
c68db6d38ef6fd7b4600c2f06b28f2b1874ceed2
-
SHA256
a4912840dc1b7230bfd9c89631995da481d23039e0b55905657d5f312bc48a2e
-
SHA512
7b56b97a2aee5723188338bf98e458351fa96dcc216b3709fe69325a749923f1f3c6dc5dc4a228ef4d6c0209b7d218368adad71d7b86af480ec0a9823b766caf
-
SSDEEP
12288:PEev8yzldqX88RDiKAiAzixPnD7ejB1OqS/31PPLCbAshEKQ3aQ1b64fQETEO:PEIXzlR4iKjQyP2jW3BTADEbmpmt
Static task
static1
Behavioral task
behavioral1
Sample
a4912840dc1b7230bfd9c89631995da481d23039e0b55905657d5f312bc48a2e.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a4912840dc1b7230bfd9c89631995da481d23039e0b55905657d5f312bc48a2e.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
vidar
8ecc9c7eaebfdf2a8cc0586d7419d6ea
https://t.me/maslengdsa
https://steamcommunity.com/profiles/76561199786602107
https://t.me/lpnjoke
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0
Targets
-
-
Target
a4912840dc1b7230bfd9c89631995da481d23039e0b55905657d5f312bc48a2e
-
Size
598KB
-
MD5
f10e80c2063428382e5c2571e4ff37aa
-
SHA1
c68db6d38ef6fd7b4600c2f06b28f2b1874ceed2
-
SHA256
a4912840dc1b7230bfd9c89631995da481d23039e0b55905657d5f312bc48a2e
-
SHA512
7b56b97a2aee5723188338bf98e458351fa96dcc216b3709fe69325a749923f1f3c6dc5dc4a228ef4d6c0209b7d218368adad71d7b86af480ec0a9823b766caf
-
SSDEEP
12288:PEev8yzldqX88RDiKAiAzixPnD7ejB1OqS/31PPLCbAshEKQ3aQ1b64fQETEO:PEIXzlR4iKjQyP2jW3BTADEbmpmt
-
Detect Vidar Stealer
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-