General
-
Target
2796-8-0x0000000000400000-0x0000000000659000-memory.dmp
-
Size
2.3MB
-
Sample
241209-n627tswqft
-
MD5
757d239ce6679daac120715a644c1ac4
-
SHA1
18dbc41c05c8e9b4aff7341b3da3e227cd905da7
-
SHA256
feb2ff9e4fae03c8bc5b2e33990793aa7c362df70150dce38ea304f03d439ef1
-
SHA512
70b54a8c6e220e8b263922c7b6a00000ca72a1bfb9834e463f873714d1356654a9deab9f6a0048a52dbb50e0785421f7c09712ce164e3dac045842cb7ee2c832
-
SSDEEP
6144:Ph0ZpFC4sffny7TuLBdZlT4DIJYdy3M8i:Ph0ZpFCfB3TGyYy3/i
Behavioral task
behavioral1
Sample
2796-8-0x0000000000400000-0x0000000000659000-memory.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2796-8-0x0000000000400000-0x0000000000659000-memory.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
vidar
11.8
8ff0797948d4b39f051a704ea27bdbde
https://t.me/fu4chmo
https://steamcommunity.com/profiles/76561199802540894
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Targets
-
-
Target
2796-8-0x0000000000400000-0x0000000000659000-memory.dmp
-
Size
2.3MB
-
MD5
757d239ce6679daac120715a644c1ac4
-
SHA1
18dbc41c05c8e9b4aff7341b3da3e227cd905da7
-
SHA256
feb2ff9e4fae03c8bc5b2e33990793aa7c362df70150dce38ea304f03d439ef1
-
SHA512
70b54a8c6e220e8b263922c7b6a00000ca72a1bfb9834e463f873714d1356654a9deab9f6a0048a52dbb50e0785421f7c09712ce164e3dac045842cb7ee2c832
-
SSDEEP
6144:Ph0ZpFC4sffny7TuLBdZlT4DIJYdy3M8i:Ph0ZpFCfB3TGyYy3/i
-
Detect Vidar Stealer
-
Stealc family
-
Vidar family
-