General
- Target Kiddions_v2.zip
- Size 2.3MB
- Sample260131-le9rgsfs4e
- SHA256 461179d961f3a981487eb1bccc517121c3afc1707d80add00e75dc27f45010a3
- MD5 de1ffb11e66fe7481d4cd52f204a3534
- SHA1 cb25345b532433b4b18c8989d5d467d3bca52450
- SHA512 8715a49fae1c3cdb1828d92b3bbf5ab8b5d20ee88cad12bbab7afbc458691dd228ad5346fcfee748eb0ef962f2ea9309d41e20ae6db9762d6f89dd965ee88c8d
- SSDEEP 49152:/Ge51LEj8wjzRxLCXiv+e8HTU8RnJZhVTuxX9VmVsAK:ucLEj8wjzvCXiv+nTU8RJVOgtK
- TLSH T1B7B53393F2A4A116ECDED9D8C5053C1A212BF0B32C9536D4A154D87C6BEEC6142B6EDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Kiddions_v2/Kiddions Mod.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Kiddions_v2/Kiddions Mod.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Kiddions_v2/msedge_elf.dll
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Kiddions_v2/Kiddions Mod.exe
- Size 1.5MB
- SHA256 232fa5792839dc677b0211b3694954e9660b174aa0f9bedcab772ac1e86d3843
- MD5 e31770026101eaccb1b5de7cffd52033
- SHA1 235beed3a3c2ecb6415eff789d2f4deb2cd28c3b
- SHA512 c65068629659f5e11e0580e57f10f14e685b4e7fe26e30e2447bc5c74fddaf8c233d095bb96df4b982b2695048a5e4f7c7d5bc138613fbc69db86a05dde6e9cc
- SSDEEP 24576:WdpUGxARynhYYI6dwnHL3b5qbDCLTTG/Zl1kngqi6Qj92dgysZI:Z/RynhYYlEbb5Q4TT05hxY
- TLSH T1B9758C13F29902E8D06ED2B9CB568132EA61BC060B35B6DF069073552F77BE46B3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Vidar Stealer
-
Vidar family
-
- Target Kiddions_v2/msedge_elf.dll
- Size 4.5MB
- SHA256 c6581c3aa98c9371ecdcaeb598a26ec8a1a5cf6056d00e5b89885391dce36e78
- MD5 88c4380fb107619c09d07c71c6c775e1
- SHA1 6918099bfb56b444d865211e6b519ad03f462f6c
- SHA512 54d4cde06354d6936ad44a2708b5a7baa9af44dab3f7f9e7345c7214a8cb131018da0f4924f35f0464f4252cc5814519be6c958d9257446d0e84ac57168b4bfa
- SSDEEP 49152:TBDVMlDxyfAcYobhZiIoEemJSR92GRIVEHFtgA5WeSDG:TfMM6rD8Ez/WeSq
- TLSH T1A8265A13ED944665C0ABE13D9CB6A141BA307C480B7423D32E527A793EB7BC4527BB39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Vidar Stealer
-
Vidar family
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.