Overview

overview

10

Static

static

10

532bc078a6...1a.exe

windows10-2004-x64

3

532bc078a6...1a.exe

windows11-21h2-x64

3

Resubmissions

17/04/2025, 16:16

250417-tqz1eswqy210

17/04/2025, 15:56

250417-tdt9eawmx410

17/04/2025, 14:27

250417-rssysazry610

22/01/2023, 15:20

230122-sq122sgd5910

18/01/2022, 00:18

220118-alwyesegdk10

Sharing

Copy URL Twitter E-mail

General

  • Target
    532bc078a68683ce70cb765191a128fadee2a23180b1a8e8a16b72f1a8ee291a
  • Size 858KB
  • Sample250417-rssysazry6
  • SHA256 532bc078a68683ce70cb765191a128fadee2a23180b1a8e8a16b72f1a8ee291a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
stealer1131vidar

Malware Config

Extracted

Family

  • vidar

Version

  • 49.7

Botnet

  • 1131

C2

  • https://mastodon.online/@prophef1

  • https://koyu.space/@prophef2

Attributes
  • profile_id

    1131

Signatures

  • Vidar Stealer 1 IoCs
    stealer
  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 532bc078a68683ce70cb765191a128fadee2a23180b1a8e8a16b72f1a8ee291a
    .exe 858KB

532bc078a68683ce70cb765191a128fadee2a23180b1a8e8a16b72f1a8ee291a

  • IMPHASH 39b57198102825a924b1841fc7d342af
  • SHA256 532bc078a68683ce70cb765191a128fadee2a23180b1a8e8a16b72f1a8ee291a
  • MD5 SHA1 SHA512 SSDEEP
windows:5windowsx86arch:x86

  • Vidar Stealer

    stealer

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
668557
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths