Overview

overview

10

Static

static

10

6412-1878-...ry.exe

windows7-x64

6412-1878-...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6412-1878-0x0000000000A00000-0x0000000000D00000-memory.dmp

  • Size

    3.0MB

  • Sample

    241106-pycgwa1brm

  • MD5

    3007bc40b46129c1dbddccdb586f2d4f

  • SHA1

    b9c929baa5b3c9b897abec3f26d9c06062d6f6eb

  • SHA256

    3e24592ad50b34040a8fc0e4fa65a95cdd1e45c9f0218e341056b2101f203ae8

  • SHA512

    ae8507550aa95aae279fa55ab6b919290c973e211f5b8826be37bcb58571668c4c790bb87b6e96229c15370782ba5c571639868545f2dba2ab3a13a0bb6872ca

  • SSDEEP

    24576:KIJS3goXObriEwMGNL/geFyNcTN+jv75TQn652VBuNyb4:ps3Z+bWELGJtF4ch+jvNm0Nyb4

Score
10/10
vidarstealer

Malware Config

Extracted

Family

vidar

C2

https://t.me/asg7rd

https://steamcommunity.com/profiles/76561199794498376
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6

Targets

    • Target

      6412-1878-0x0000000000A00000-0x0000000000D00000-memory.dmp

    • Size

      3.0MB

    • MD5

      3007bc40b46129c1dbddccdb586f2d4f

    • SHA1

      b9c929baa5b3c9b897abec3f26d9c06062d6f6eb

    • SHA256

      3e24592ad50b34040a8fc0e4fa65a95cdd1e45c9f0218e341056b2101f203ae8

    • SHA512

      ae8507550aa95aae279fa55ab6b919290c973e211f5b8826be37bcb58571668c4c790bb87b6e96229c15370782ba5c571639868545f2dba2ab3a13a0bb6872ca

    • SSDEEP

      24576:KIJS3goXObriEwMGNL/geFyNcTN+jv75TQn652VBuNyb4:ps3Z+bWELGJtF4ch+jvNm0Nyb4

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks