General

  • Target

    2024-10-18_d5ae74ff4b6cdc3bc36471d80dfd3c38_cobalt-strike_mafia

  • Size

    574KB

  • MD5

    d5ae74ff4b6cdc3bc36471d80dfd3c38

  • SHA1

    3c74258bd665540c4a6a1f830f84951e3de9fecc

  • SHA256

    c499defb9ea53ca14d6ace0a0b6b537dfad11271e342c6005415c1fcdfcefc9b

  • SHA512

    c5fa195e69d5374d2a540ccaf66e1880deca0a5059ff1495823ef89550c295e9f860403e29b2cfd3be08c593c70a9d0c467a6b2ea1c18a038c09dbe489189090

  • SSDEEP

    12288:7mwYTte0NakjE2i3KghRiAqqUEGq60dKdxL0VYExdZaZe4S:7atewE2i3KghRiAqqUEGq6AKdx5Os

Malware Config

Extracted

Family

vidar

Botnet

c0c7c802c4ec94ab4c7fcd88c588698c

Signatures

  • Detect Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-18_d5ae74ff4b6cdc3bc36471d80dfd3c38_cobalt-strike_mafia
    .exe windows:6 windows x86 arch:x86

    d10af643340e1121562abe3e6bd5b0e1


    Headers

    Imports

    Sections