Overview

overview

10

Static

static

3

32441b27ad...f2.exe

windows7-x64

10

32441b27ad...f2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32441b27ad49e5a9c83b7674147078244fc089121d3b564a088b5c342379daf2.exe

  • Size

    1.2MB

  • Sample

    241123-k19g6symaq

  • MD5

    a8f61218ef388853e4f96095848677cd

  • SHA1

    2455889d25aa50ad1d390fe310c4707ef20c7e47

  • SHA256

    32441b27ad49e5a9c83b7674147078244fc089121d3b564a088b5c342379daf2

  • SHA512

    6762d3eda832b19c5eaaa360e9446bfbf63f191e0f6ddf0aafd950320a7d53c60cd22518fde3ac5b95f6201bac6d4b915c66dfd9287dfb952ea79e1bb758f135

  • SSDEEP

    24576:deeuI73ROoGgF9Wu6lqlJ39o16PFViLxmaJ9spcGHcd3fV2ZpGw1bBm:dpuI73T59Pwk9xPDcNGIPV2Hr1m

Score
10/10
vidardiscoverystealer

Malware Config

Targets

    • Target

      32441b27ad49e5a9c83b7674147078244fc089121d3b564a088b5c342379daf2.exe

    • Size

      1.2MB

    • MD5

      a8f61218ef388853e4f96095848677cd

    • SHA1

      2455889d25aa50ad1d390fe310c4707ef20c7e47

    • SHA256

      32441b27ad49e5a9c83b7674147078244fc089121d3b564a088b5c342379daf2

    • SHA512

      6762d3eda832b19c5eaaa360e9446bfbf63f191e0f6ddf0aafd950320a7d53c60cd22518fde3ac5b95f6201bac6d4b915c66dfd9287dfb952ea79e1bb758f135

    • SSDEEP

      24576:deeuI73ROoGgF9Wu6lqlJ39o16PFViLxmaJ9spcGHcd3fV2ZpGw1bBm:dpuI73T59Pwk9xPDcNGIPV2Hr1m

    Score
    10/10
    vidardiscoverystealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Vidar Stealer

      stealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks