General
-
Target
ad123b1589cb2c726de8da9af56ec2dacc22518cda285dc3c014c65c4d405a1d.exe
-
Size
1.1MB
-
Sample
241122-de2f4syqcm
-
MD5
774c8215da3cb73644d36ca3f60e676b
-
SHA1
375f9c6d12374f17cd8f483c565015171b988e49
-
SHA256
ad123b1589cb2c726de8da9af56ec2dacc22518cda285dc3c014c65c4d405a1d
-
SHA512
ceff4e53bdd23ce784be45b6ffa5598f01edaf16a800ba5fe1367b2fcc29de943d5cab9d40123ac9fc61677749b9c8b2efecb3624f05d285097bd6dc0e901207
-
SSDEEP
24576:s9y5ZBrOwXMFjy47F710L+O0WK2h4xsPxdUn6d9dZiffX6j76oy4cXW:skjrOaM97F71tbWK2h1Px06fdqCja4mW
Static task
static1
Behavioral task
behavioral1
Sample
ad123b1589cb2c726de8da9af56ec2dacc22518cda285dc3c014c65c4d405a1d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ad123b1589cb2c726de8da9af56ec2dacc22518cda285dc3c014c65c4d405a1d.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
vidar
11
57a8c39f1ac1987167a282329835ec7a
https://steamcommunity.com/profiles/76561199780418869
https://t.me/ae5ed
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0
Targets
-
-
Target
ad123b1589cb2c726de8da9af56ec2dacc22518cda285dc3c014c65c4d405a1d.exe
-
Size
1.1MB
-
MD5
774c8215da3cb73644d36ca3f60e676b
-
SHA1
375f9c6d12374f17cd8f483c565015171b988e49
-
SHA256
ad123b1589cb2c726de8da9af56ec2dacc22518cda285dc3c014c65c4d405a1d
-
SHA512
ceff4e53bdd23ce784be45b6ffa5598f01edaf16a800ba5fe1367b2fcc29de943d5cab9d40123ac9fc61677749b9c8b2efecb3624f05d285097bd6dc0e901207
-
SSDEEP
24576:s9y5ZBrOwXMFjy47F710L+O0WK2h4xsPxdUn6d9dZiffX6j76oy4cXW:skjrOaM97F71tbWK2h1Px06fdqCja4mW
-
Detect Vidar Stealer
-
Vidar family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates processes with tasklist
-