General

  • Target

    build.exe

  • Size

    119KB

  • MD5

    08388bb4894c71e7b1be4bad966c3824

  • SHA1

    7437ac98f08fc41283b900aa6fb0ae350d59dd6c

  • SHA256

    986a98dc33a925fa232e1e5311807c7681cad9e0f07957d81e4f2f8257503f9c

  • SHA512

    2adf5154e7dca7de1fcf12560c97f1b74e66fb3c5074d8fa9d29dd9da91a1314f9fc18270808c12364c4941a6a2346109824bd4c625df905f9be84af393934b3

  • SSDEEP

    3072:8Ho0VvS7fw67XojiwHjwlntccGGLz9VkYFP+WR9pLhbFnhSe2e2e2nw:41VvSM6ziiw0cMLzDj9VBne

Score
10/10

Malware Config

Extracted

Family

vidar

C2

https://t.me/sc1phell

https://steamcommunity.com/profiles/76561199819539662

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0

Signatures

  • Detect Vidar Stealer 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:6 windows x86 arch:x86

    84ba17106ada936d580064070fd488b4


    Headers

    Imports

    Exports

    Sections