General

  • Target

    build.exe

  • Size

    943KB

  • MD5

    8d861bb4030412f702135bb0817b81d9

  • SHA1

    45ec1c5b73ba2f35c5f4038719989ee6733082e7

  • SHA256

    94b8c531d97eabb5d7cd2a03845fcf17d399b589260275a4ea979d62d03963d3

  • SHA512

    59da85738f3df2982bf5bbe1162bc71e5fff0f9b198f700e7313a48ae7b42d0b948280a3ec8d5c2ab3cc03b02a4b6104712b6dcc6852cfaf34ee6fae64e78cf4

  • SSDEEP

    24576:ney05nEQXObrQEwMGNL/geFyNcTN+jv75TQn652VBuNyb6:eLZ+bsELGJtF4ch+jvNm0Nyb6

Score
10/10

Malware Config

Extracted

Family

vidar

C2

https://t.me/asg7rd

https://steamcommunity.com/profiles/76561199794498376

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6

Signatures

  • Detect Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:5 windows x86 arch:x86

    dae99f55715d10799c7a5f3e0cd9d13d


    Headers

    Imports

    Sections