General

  • Target

    2024-10-18_45cb65ab764f05f26990edfe62e39169_cobalt-strike_mafia

  • Size

    574KB

  • MD5

    45cb65ab764f05f26990edfe62e39169

  • SHA1

    fee5ed137b340a6ebd693177a190b50f5936c6bb

  • SHA256

    5121a59b2b26e34094b016429ef97e4e29077671b0670f0092e23e7c57b19982

  • SHA512

    d1e9e8daf1652118b88ed30a70bd869fd335082b99aafab096a8d8053ad48d326f1dbdd1318393a96867b993d0d46e52769d904e26b3b14d4844edca9f24f8d6

  • SSDEEP

    12288:qrMlFbctnITNE2i3KghRiAqqUEGq60dKdxL0VYExdZaZM4S:qAbcqE2i3KghRiAqqUEGq6AKdx5OG

Malware Config

Extracted

Family

vidar

Botnet

c0c7c802c4ec94ab4c7fcd88c588698c

Signatures

  • Detect Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-18_45cb65ab764f05f26990edfe62e39169_cobalt-strike_mafia
    .exe windows:6 windows x86 arch:x86

    d10af643340e1121562abe3e6bd5b0e1


    Headers

    Imports

    Sections