General

  • Target

    99d5a6017c22db0916659802a541b155.exe

  • Size

    943KB

  • MD5

    99d5a6017c22db0916659802a541b155

  • SHA1

    fcdc010c60bda6f5a11e3b7cb4311de1bda58ac9

  • SHA256

    1747353879ce145a264c7e45a54f5a3a80c969185d63ba2a335de49a9c3cd5e1

  • SHA512

    5e3a1745edf1922cad244f93ab505c650a303b5a72588bb894f76e2b545374bc1943a733b59f92bfdafdb85cd2bf0b0e8d979f04cb8a7b8f65050cfe721d72a8

  • SSDEEP

    24576:zey05nEQXObrQEwMGNL/geFyNcTN+jv75TQn652VBuNyb6:6LZ+bUELGJtF4ch+jvNm0Nyb6

Malware Config

Extracted

Family

vidar

Version

11.4

Botnet

12d6c83ea3cfc666e31df67358e93313

C2

https://t.me/asg7rd

https://steamcommunity.com/profiles/76561199794498376

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6

Signatures

  • Detect Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 99d5a6017c22db0916659802a541b155.exe
    .exe windows:5 windows x86 arch:x86

    dae99f55715d10799c7a5f3e0cd9d13d


    Headers

    Imports

    Sections