General

  • Target

    2024-10-19_6253ec49804d1a4c348e1e096fa2ee74_cobalt-strike_mafia

  • Size

    574KB

  • MD5

    6253ec49804d1a4c348e1e096fa2ee74

  • SHA1

    c4bf885cd3a99e68360d43cf065cb5962e1e306f

  • SHA256

    9464b8d7a79d4f618ac5001c3726ff02d5fbc6c00aa6c23bf1d01a083dd5f935

  • SHA512

    48f573b822ee4c39668f4da5b075522fff0ba2487d1c409bcece6d94c4b0d18f638ab212cbc7bd55a00b60d0b6d4e06eaf5041353886842c57e9b3177b997a2e

  • SSDEEP

    12288:SewUbV211CKvE2i3KghRiAqqUEGq60dKjZL0VYExdZaZ04S:S2V2FE2i3KghRiAqqUEGq6AKjZ5OK

Malware Config

Extracted

Family

vidar

Botnet

4a5bc8b73e12425adc3c399da8136891

Signatures

  • Detect Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-19_6253ec49804d1a4c348e1e096fa2ee74_cobalt-strike_mafia
    .exe windows:6 windows x86 arch:x86

    d10af643340e1121562abe3e6bd5b0e1


    Headers

    Imports

    Sections