Overview

overview

10

Static

static

10

0.exe

windows7-x64

10

0.exe

windows10-2004-x64

10

1.exe

windows7-x64

10

1.exe

windows10-2004-x64

10

3.exe

windows7-x64

3

3.exe

windows10-2004-x64

7

Resubmissions

24/03/2025, 00:06

250324-adxjzszzez 10

23/03/2025, 20:32

250323-zbkj3svsc1 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    malware.7z

  • Size

    688KB

  • MD5

    8f96070ece15d2ac7bd98e89e8f9119b

  • SHA1

    7fa4661d75a2c40d1abe540dcc58f9fe0bba9962

  • SHA256

    fc692e62d466b316c3d0174fdbe6fa6d778e47e29b356a39d9a8f3df1e4a571d

  • SHA512

    14917b01f4083d676cdd7afde76c136c2a4fbed8d1bfad3be850b53dbb2bb3168ab26a9a8c288e203806e89efacae2f943da279636f75c11c9fb9faf22534a01

  • SSDEEP

    12288:8iOQ2snGfsgFZvXGHlaMUM5X/uOIPGzDbWoKtEnImpOPySv6eeRPPHsrmI8qzLPT:3DG0gFZfGHltDPujPqu2Pp8yVRPPAjvT

Score
10/10
stealer651vidar

Malware Config

Extracted

Family

vidar

Version

28.3

Botnet

651

C2

http://manillamemories.com/

Attributes
  • profile_id

    651

Signatures

  • Vidar Stealer 1 IoCs
    stealer
  • Vidar family
    vidar
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • malware.7z
    .7z

    Password: infected

  • 0
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fd6e2d905392a4911591f53458632d22


    Headers

    Imports

    Sections

  • 1
    .exe windows:5 windows x86 arch:x86

    Password: infected

    50ac3d5cf691b8bce399538f4883f0ad


    Headers

    Imports

    Sections

  • 3
    .exe windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections