Analysis
-
max time kernel
52s -
max time network
93s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
21-12-2024 22:57
General
-
Target
11a3fde6fbce94c261cc8785856d132eccd5239e95a9129c2ba404cad58bbd96.exe
-
Size
307KB
-
MD5
848cfa950baa476b7127aa42a8f8cb2f
-
SHA1
60fd5296042413a9cebb3a4952f8efa36d8d31d1
-
SHA256
11a3fde6fbce94c261cc8785856d132eccd5239e95a9129c2ba404cad58bbd96
-
SHA512
6bed8b5a08a9bfd6eb88eb4203960e6f71e348ae254877653ece37ad144d0e94d79bee58a3e1a39e0c33d0170e2e4aa1ee269224325799cbe5d8fe0b7e1a4e58
-
SSDEEP
3072:sXqhLZd18O5PcsUpbfxaBytteEd8mGkhXhSSOxtzIZ9dKfV0DgR84+5sm+t904:ooLZ84csYaBk/hXgSOxtodKuDgRTX
Malware Config
Extracted
vidar
55.1
1636
https://t.me/dghzq
https://t.me/zjsqpz
https://t.me/fqwexzq
-
profile_id
1636
Signatures
-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
Vidar family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\11a3fde6fbce94c261cc8785856d132eccd5239e95a9129c2ba404cad58bbd96.exe"C:\Users\Admin\AppData\Local\Temp\11a3fde6fbce94c261cc8785856d132eccd5239e95a9129c2ba404cad58bbd96.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
376KB
-
Filesize
292KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
292KB
-
Filesize
40.2MB
-
Filesize
376KB