General

  • Target

    cjrimgid.exe

  • Size

    120KB

  • MD5

    807dadd8710a7b570ed237fd7cd1aa4b

  • SHA1

    d0e3a3a2b73bb2f3374a58914c8e35034ed5744d

  • SHA256

    7e18ae103ce6fd596459cf0d5fc49832cdbd19a5780b0f2db934c2b649bc2080

  • SHA512

    2270262a8bfe23ce2fac23e7208113be2fec093c3edd7aec456df6738cb19c02d5955c33d64df766154967d28a32947368bb2efaa6ec742031db07bce470d7f6

  • SSDEEP

    3072:FEFRh0auCcJVwDjwzTC2SCn/FtVQenIuxIGWsnRR9pLTfKvXFD:W3h0aMJ+Hw3Pgen79/CvV

Score
10/10

Malware Config

Extracted

Family

vidar

C2

https://t.me/sok33tn

https://steamcommunity.com/profiles/76561199824159981

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0

Signatures

  • Detect Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cjrimgid.exe
    .exe windows:6 windows x86 arch:x86

    88967e8dc94c2149dd89b55f39e46fa6


    Headers

    Imports

    Exports

    Sections