Overview

overview

10

Static

static

10

1808-246-0...ry.exe

windows7-x64

1808-246-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1808-246-0x0000000000400000-0x0000000000422000-memory.dmp

  • Size

    136KB

  • Sample

    250220-dtzaasvqgq

  • MD5

    b71a965ff3100cabae1f2eb2774128a4

  • SHA1

    8a746fcd4d6e7ad5c1d3a51d67da956a5c7da5c6

  • SHA256

    ffdf4f4d4bff035c698a18b9da350debaaa6190a87e7497a3c634db440204ada

  • SHA512

    0350a05e2448144343400238b8bcf20b3dd2c49669ed4591c55a2b3d1c920d403ddce014ab5d01e40714bd5f52f092e7c77ce906bce3b02f0f16b28046312168

  • SSDEEP

    3072:4EFRh0auCcJVwDjwzTC2SCn/FtVQenIuxIGWsnRR9pLTfRvXSD:r3h0aMJ+Hw3Pgen79/Jvi

Score
10/10
vidarstealer

Malware Config

Extracted

Family

vidar

C2

https://t.me/g02f04

https://steamcommunity.com/profiles/76561199828130190
Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0

Targets

    • Target

      1808-246-0x0000000000400000-0x0000000000422000-memory.dmp

    • Size

      136KB

    • MD5

      b71a965ff3100cabae1f2eb2774128a4

    • SHA1

      8a746fcd4d6e7ad5c1d3a51d67da956a5c7da5c6

    • SHA256

      ffdf4f4d4bff035c698a18b9da350debaaa6190a87e7497a3c634db440204ada

    • SHA512

      0350a05e2448144343400238b8bcf20b3dd2c49669ed4591c55a2b3d1c920d403ddce014ab5d01e40714bd5f52f092e7c77ce906bce3b02f0f16b28046312168

    • SSDEEP

      3072:4EFRh0auCcJVwDjwzTC2SCn/FtVQenIuxIGWsnRR9pLTfRvXSD:r3h0aMJ+Hw3Pgen79/Jvi

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks