General

  • Target

    VacBypassInjector.exe

  • Size

    119KB

  • MD5

    4c347d917a8377f19cb89a3aa94a94d9

  • SHA1

    be2b5cd59c09ecf8a779197ca88ebb6722427159

  • SHA256

    c6638f4e793b808e87b9b4a8c546a28c3bdd7f5b5eae2b33dcae7402a69f63f4

  • SHA512

    4f0911229d1523630a07b46d1fb4249b48d3284f04f541668fb4f0d7762567f90304202a6785688712da70d28ea4554e7a229b1a0a9d4b20192a6f766b8ec15d

  • SSDEEP

    3072:8Ho0VvS7fw67XojiwHjwlntccGGLz9VkYFP+WR9pLhb7nhSe2e2e2nw:41VvSM6ziiw0cMLzDj9V/ne

Score
10/10

Malware Config

Extracted

Family

vidar

C2

https://t.me/sc1phell

https://steamcommunity.com/profiles/76561199819539662

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0

Signatures

  • Detect Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • VacBypassInjector.exe
    .exe windows:6 windows x86 arch:x86

    84ba17106ada936d580064070fd488b4


    Headers

    Imports

    Exports

    Sections