2025-07-08_6c4fa3e0eedb3100f4757bd2172bec9f_conti_vidar

General

Target
2025-07-08_6c4fa3e0eedb3100f4757bd2172bec9f_conti_vidar
Size 243KB
Sample250708-fr3wtatthz
SHA256 14468d1a661ce6296e3b0ee696d8c95b3798138668463e142046c056fb870b68
MD5 6c4fa3e0eedb3100f4757bd2172bec9f
SHA1 5d8c9959c37fcf51c33a59d87d73f5fed90aa05b
SHA512 997464dcb3bdc85d985cca13204fea3e736d6df38cbba50a3122b9cad4f678358004107cf3d3de1bf9eeec808efd1e3f4106f3b006f144091b4a694491101393
SSDEEP 3072:lv+pCkDrV8Eg41DYilaaS6149WnsUctNeEbAmCAlhDUYn3GMHO76Mx8:+CMV8Egq8AbS6SWde/bCAlhxbM+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-07-08_6c4fa3e0eedb3100f4757bd2172bec9f_conti_vidar

File Explorer

2025-07-08_6c4fa3e0eedb3100f4757bd2172bec9f_conti_vidar

.exe 243KB

2025-07-08_6c4fa3e0eedb3100f4757bd2172bec9f_conti_vidar

IMPHASH 480e15f1c0ffcaef8e7a03e98c1830ef
SHA256 14468d1a661ce6296e3b0ee696d8c95b3798138668463e142046c056fb870b68
MD5 6c4fa3e0eedb3100f4757bd2172bec9f
SHA1 5d8c9959c37fcf51c33a59d87d73f5fed90aa05b
SHA512 997464dcb3bdc85d985cca13204fea3e736d6df38cbba50a3122b9cad4f678358004107cf3d3de1bf9eeec808efd1e3f4106f3b006f144091b4a694491101393
SSDEEP 3072:lv+pCkDrV8Eg41DYilaaS6149WnsUctNeEbAmCAlhDUYn3GMHO76Mx8:+CMV8Egq8AbS6SWde/bCAlhxbM+
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

149104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle GetLocalTime WriteConsoleW CreateFileW SetFilePointerEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetProcessHeap GetFileType SetStdHandle GetStringTypeW HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode

user32

wsprintfW

ws2_32

WSAGetLastError htons

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

2025-07-08_6c4fa3e0eedb3100f4757bd2172bec9f_conti_vidar

kernel32

user32

ws2_32

generic