General
-
Target
2596-6-0x0000000000400000-0x0000000000657000-memory.dmp
-
Size
2.3MB
-
Sample
241102-sycpesxnfy
-
MD5
9ce64127003afdb248601c6f58a06757
-
SHA1
789b35ec1da50a5df6e2a45d6a9e9cfb9c43f281
-
SHA256
7fb66f831c55f7eac9bfac8d3e03128963b27ebeffa31a2885519aeee6806780
-
SHA512
4ff71f8c69a4abd01cd478164cfeb70669bc8bc93d75e35d3717e81bd69f8137ce0d40688a1bd1b18229fdc57bff88f0ae73e8b7b48d4b88e832d5adf211ba5c
-
SSDEEP
3072:DP9MgUTtoTZ01GXNmI4c1xY7kl+cmZWEyCCfFix1NmDq0pCp8gyir9:DFMxKt5XNvzY7kI/CAjJ8k
Malware Config
Extracted
vidar
http://147.45.68.138:80
https://t.me/edm0d
https://steamcommunity.com/profiles/76561199768374681
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0
Extracted
vidar
0
Targets
-
-
Target
2596-6-0x0000000000400000-0x0000000000657000-memory.dmp
-
Size
2.3MB
-
MD5
9ce64127003afdb248601c6f58a06757
-
SHA1
789b35ec1da50a5df6e2a45d6a9e9cfb9c43f281
-
SHA256
7fb66f831c55f7eac9bfac8d3e03128963b27ebeffa31a2885519aeee6806780
-
SHA512
4ff71f8c69a4abd01cd478164cfeb70669bc8bc93d75e35d3717e81bd69f8137ce0d40688a1bd1b18229fdc57bff88f0ae73e8b7b48d4b88e832d5adf211ba5c
-
SSDEEP
3072:DP9MgUTtoTZ01GXNmI4c1xY7kl+cmZWEyCCfFix1NmDq0pCp8gyir9:DFMxKt5XNvzY7kI/CAjJ8k
Score10/10-
Detect Vidar Stealer
-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
Vidar family
-