General

  • Target

    2024-10-18_8450c7dfc769b72b1024eba7374ccc6b_cobalt-strike_mafia

  • Size

    574KB

  • MD5

    8450c7dfc769b72b1024eba7374ccc6b

  • SHA1

    545fdae2000211fa2b7c8d535c96fc63a5807306

  • SHA256

    c841b0e0e8f9c796c8332a79fa4da43f2e9bbd0346902c00870dedc85ce0ebee

  • SHA512

    319c59ba360a7d991440430da4d95e92de8da976718c70a48167572bd6d9d780c796b68b40df8ef566e7d8fba9e579cbcff0cba0a04039753e01f9f48eba33c5

  • SSDEEP

    12288:VA8loC4rZwJIENE2i3KghRiAqqUEGq60dKjZL0VYExdZaZo4S:Vrj4rnyE2i3KghRiAqqUEGq6AKjZ5OO

Malware Config

Extracted

Family

vidar

Botnet

4a5bc8b73e12425adc3c399da8136891

Signatures

  • Detect Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-18_8450c7dfc769b72b1024eba7374ccc6b_cobalt-strike_mafia
    .exe windows:6 windows x86 arch:x86

    d10af643340e1121562abe3e6bd5b0e1


    Headers

    Imports

    Sections