diamondfox | 65293492afb72177f3acc43174cf57cfd528cbc580af9af0b9bac6c77726b0c2

Sharing

Copy URL Twitter E-mail

General

Target
Game.Launcher.v17.9(1).rar
Size 964.4MB
Sample260217-1xhs2shv7f
SHA256 65293492afb72177f3acc43174cf57cfd528cbc580af9af0b9bac6c77726b0c2
MD5 6e16e78d812b51f506b3def725a0969c
SHA1 9be8b27085bd8e4e3fe262a4b02a8f07b50e9f75
SHA512 4b67f1b7e2353eae63fd39cb9ebbab44b7a66ebaef6dedea8c225f996381dde46da6bc0b4113648231b11fdc72fc6faa5f5f054e72a0d6184fdb7a6633630731
SSDEEP 25165824:2d4aBlmtV9KK84w8MIAuoiMHDGXksPVenXtAZOtV:0JcGK84cIF2D8le9AsT
TLSH
T13DA93384E43B9097762178AB3ADFA4F7021AA7F10B51F926B06147F44DE8D0B7378B16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  CSERHelper.dll
- Size 121KB
- SHA256 09d4c2067217b1900d4d7a936969f809821649b10ed8afd0f49de2871f7a3784
- MD5 833d30fa5bd04e2011cb6b9d7081dded
- SHA1 4c8a9cccbecb4d06ec76cc38a9c850f05a020057
- SHA512 649d2c1f9cf34a220e3bb67b1a656dcb290be0a3522f87fd4e948121a25153f73bc53c06d8997744cf8cdc82486a4a902d6b0c9da87ec190abe624edbb9c04ec
- SSDEEP 1536:M4LV+K0XfRcC4qOMf+6nTItU0gx1qi4p/Zf7bzHkLL3m72Sj9Ddc4K8IXcnzJ38g:sK0X5jXnMeO3Ho76DdA8IXcejaFV
- TLSH
  T1A7C3AE1273804072E4E70A7C49D5E72A6B7BBB701A3988475F68574F2FA1BE16B27313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  Set-up.exe
- Size 771.2MB
- SHA256 ae212c33667c7bc2c2e9355f6076e3e96e762cd1a77eed216bbea301c0704326
- MD5 b2ace6dc311ce52f3c25b5f8ef59fad1
- SHA1 b91a87a8699c135a3f8519c169b1bc430656361d
- SHA512 9dd3f7ca1b353f086d50fb5c6a6831fb36b01057c8d55d35e83f527a4b741428cfb68a4640375842679de3a1064076415f7b39a301dbfce050787675d8e1b36a
- SSDEEP 12582912:aGvOvZENGzUIuvTBhAujd2ZVjH2llJmO5DzrAIm:TMuNfIsVhAupYGmOJrA5
- TLSH
  T14389331098299071E3FE5B3B59BA2E4EAB7412E7DE4A7F1D0014F1C568E7703E68BD18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery vidar stealer themida
- Detects Vidar Stealer
  stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
- Vidar family
  vidar
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- Suspicious use of SetThreadContext
behavioral2
- Target
  package/bins_cef_win32_win7-64.zip.vz.6a19f0c62ecc73bb23357ab974c241a5c4eb0f56_106290222
- Size 101.4MB
- SHA256 880f95388ba21224e6ef72e7f340f9a8c12bccdb98430b38aeb910e13ebb795f
- MD5 89965a2c1493c7131540a6645316717f
- SHA1 6a19f0c62ecc73bb23357ab974c241a5c4eb0f56
- SHA512 59b31915f7488c51ab9ab9eb9e2b05d78c30831401b75cda3be0cf308b7760ca45cfe6e29f102f782310a9021a494dfb62ae06c06cf2ad4f0b945d51ca04b2da
- SSDEEP 3145728:gcZhBurQU2266SbRu1RW6ZJDKcpc+3VdG:FTBurLP0u14uJDK8DG
- TLSH
  T1F838332B128E406A52C77339FAA8E0C9242DAA47E5FDD755F4E4F1C11229337BE8709D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  package/bins_codecs_win32.zip.vz.0558fe86c682156c00708ee8da2eadc016807c73_5761506
- Size 5.5MB
- SHA256 4da37928bdb7be46751c5fc9824f0487a11cffcc8520ab96ec423af44fd68826
- MD5 951e730b5d1c1fbec8b406d7c7f400f3
- SHA1 0558fe86c682156c00708ee8da2eadc016807c73
- SHA512 f7755d27cf303b24b2b942dcc0f8ac04bd49ecee8078ee9dbc7f7e5403fe54eed4834ff357dcb9414f45a6515c3c444775f13154e3e57ea3e769bb3ea5a0c068
- SSDEEP 98304:9yHDp103J20Nu+uRUBtw33tKCsmH+RSQcnNlKq0oaiwXaOO5mEhp4p2LxleC:9sDToARkItNmSQcnNYqVEqOJEhUixleC
- TLSH
  T12D4633236E244301A8AAD06087C275FE5F2FBDC96531D58505E272A3D31B6AE2C7CC8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral4
- Target
  package/bins_misc_win32.zip.vz.a3e74ae8d0c076039d4d0e820861b3b15ca319c1_11586963
- Size 11.1MB
- SHA256 453ba67070469c39faea5863d4bc292756751f0f60a4407a75b003688f8efdab
- MD5 2372f9b0fd7648a4dcea7c497cbdf9b5
- SHA1 a3e74ae8d0c076039d4d0e820861b3b15ca319c1
- SHA512 f9d4530d74e1c50ce4e55b5496a43ee99159857068beb4837ef56a3c0dfd0d92288aaad6eeacc10d804922a0ffcbac380f6d1da63ba2e21edd5827e1ba8ea777
- SSDEEP 196608:/4eLPqSD2k/6RgYN3SrP+dL6/kgHPwiJPqFmG2c7kEmm7qO38fLtXsg/zwBlVdl+:/5lDRCnSj66coYnN57DKtcg/zUlVdl+
- TLSH
  T134C6338D02C235C50BD0A91939AB7A4FA493ED2D7592EA941B5340DB2ED7E84413FBF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5
- Target
  package/bins_webhelpers_win32_win7-64.zip.vz.0ffc5f3f63b378d43df992e273e7b4bcb2108837_3258786
- Size 3.1MB
- SHA256 7273725d49146648a3a95f9014a72a81440c449b2695ff85697792bd128196b1
- MD5 f82d5d76ffb2132fd24e2bc7265995e9
- SHA1 0ffc5f3f63b378d43df992e273e7b4bcb2108837
- SHA512 fa8630de52edc580f69b053a7ff0ef309de8055f373e094f49aac24af446e984f21683c7eba2fdc8ac4d8b6d033bc2bc0e115d7b4a13676ee557af35533cce89
- SSDEEP 98304:aKTb5TcRjVwkDoKXwsNK3UZJ/USynQ8k1w2+L:DTFTnu7XwT3UPUSyi1B+L
- TLSH
  T12CE5338035DB5190C396FA7A4B3442333D1F181917423C74A6A636A747FBDB6AAE813B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral6
- Target
  package/bins_win32.zip.vz.6ac8aaf5adc4146769e8bd244c356f3fbbced846_34539043
- Size 32.9MB
- SHA256 c1d4dc7df7f3aab2f923579545234fd201efee45a6c69d8b511dd6ae39eb273d
- MD5 ed81f780f7cc028a763a8ef77f7af564
- SHA1 6ac8aaf5adc4146769e8bd244c356f3fbbced846
- SHA512 2091bed73cab9afd86bba2eac264495f47a60729733dd159bed8efe3c6b5c47eeef47f9385b292606611d9f4b7991060776c1d622e3fcfacaf35ad827d39c52b
- SSDEEP 786432:dr5XzyN0ppQyF34sX/Fus/ZCTVdwU5GfYAgXmX4UtOgP5Qoq5U89J:dr5W0ppQO348Es/ZCzwU8foXY7vP5Qoo
- TLSH
  T1F47733C6603935217137AA74FCD170EEA4A240E4E7AE8FB880F5D93A426791C39377E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7
- Target
  package/public_all.zip.vz.c1ad9e5bc19f982693c1b2fa05c003014c8acef3_23691516
- Size 22.6MB
- SHA256 cd5482488bc66be8807b95c07caba02b2d14d402bfd649953cb8b7507621efe3
- MD5 744b67a297c0c19a2307a91a0e659774
- SHA1 c1ad9e5bc19f982693c1b2fa05c003014c8acef3
- SHA512 1976a58dce625803329c77ed4a1607cefc1ad203503bbfb2fa15126e781c763dbcbc452200e60f7e0d157f079d2b0861fee8a380427ea06c36490dab4cf7dae9
- SSDEEP 393216:XP2wEI3WRm2nF6lvLIf1oV0Gn4cY5PSoFHI4lFUJMg0Q/BsEc/NZ7m3yh+C:XeU0nYlDI9oi9DQEngFBs9Nc4
- TLSH
  T1003733CFD2CE2E53FBB2AB1E64D0645864676F7990D8C35952249F00965AFC8F0F2E12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral8
- Target
  package/resources_all.zip.vz.3c8b3203e5c69d75ea0684c2409b86fe4d0d6f83_2856188
- Size 2.7MB
- SHA256 2dcce4e5888c857fbb7d931f2d03c134abba0f024edde20244477012c5994ddd
- MD5 fe163eba99df9a4ddcce37613ccb648f
- SHA1 3c8b3203e5c69d75ea0684c2409b86fe4d0d6f83
- SHA512 0e7b7495aa83921ff1bb939d526a2f46f1954229e0de9c02afcd33f5566420b06a3c68299f334141e6fa96ded3ba93b24ffda0a9b36e03e700dae84e4ea3fde7
- SSDEEP 49152:MHQT0HYJ+oJTf4+rc+AtJPRpmLRYNd7cmhb4hqTco6WOf/FBRbvIR1tsWhVYNV6:kQT6Y0oJMKchZpm9Ocm9444WkHbAssVb
- TLSH
  T162D5334CB3B6142F9C8633B3C0BD0981224F66B91A09BCD7E56687F6F421A85ED451FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral9
- Target
  package/resources_hidpi_all.zip.vz.3de815c3117712cb9eeb7ea4c8b275faf481dcfd_56342
- Size 55KB
- SHA256 e9cfba9af633e9d216a0cde97b1177d4cbca2a1aca7e83aaf38655dbd9be4b7d
- MD5 a207adc9a20f0a199494a0be559f423f
- SHA1 3de815c3117712cb9eeb7ea4c8b275faf481dcfd
- SHA512 7ae69b616f5a581fa483f4cb02f41d4010896866f28ea3e8b024f1fc917718f0a26f59baee13e27b617ce35e444f401278a6f8ebb8611e9aa9dc100d984716c9
- SSDEEP 768:gmqP5beFYAtNJo8WyJTaoeEUQ2zZvNZyzbHkzTxRR2Np1/lAOJCtwilPl6:85beFYAlWyEPEn2zxXyzTI2NpxKmbQd6
- TLSH
  T12743029E17B619C98C4288FF1F753E51D36A771903BF1C427BD91A886E21C6B24071FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10
- Target
  package/resources_misc_all.zip.vz.e86a975545f3ab21a77373870cb311ef93934b8c_2224876
- Size 2.1MB
- SHA256 5e9ca0aac16b4d5caa2ac77ab2ce239e8dbcabe5ba6f0565112239ebb127ab2b
- MD5 aa34041580654fb4136750fcbb4be63a
- SHA1 e86a975545f3ab21a77373870cb311ef93934b8c
- SHA512 fbca612cb005f70057840af54a99f9f1327ad27c53bf7c0ff49a397b11493d6f3ec25f43a11c4dd5660bc029f6cdf5984eb8910fd9385351798c7cc65fe46fe0
- SSDEEP 49152:Et8uyihO6YdhgzrlSxM5zgheYC7nwe57zEeay7DBGcEK6XmuH4X:EttyihO6BzrlSxM5gwbxFdZAjG
- TLSH
  T1B9A5330D81C23E131BA6F4A644398CCFE0591D39666F20A854B3B92D3D1BA5EFD539CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11
- Target
  package/steam_client_metrics.bin
- Size 2KB
- SHA256 766a23491045c55b45d70f274aa10b7f9a19eea18ca9d00ff879057a83fdc2da
- MD5 bb47e6a15b68b5221d379380fbb8708e
- SHA1 9463263f4d768c252a778be9f6ab6991ff09962a
- SHA512 d5c012e09ec2ea42f31419c00ade29d8d558a1dea457f3d404417281fcbcffb8b677cd51e208484b11db705d95274bd4f0781f0afb4268fd27dd3faaf1721d18
- TLSH
  T1B551DEE4851EEC7DDFD00F0C5C85B16F5205211B8DB2FBA6DBDB8D8969226C49ADD02C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral12
- Target
  package/steam_client_win32.installed
- Size 472KB
- SHA256 3d1f4ffc3593dd06c794d3a8c8320c49ac55f40c25eda0678b59602d9eb7c736
- MD5 7be34f9739a86b6ae8d2d01971e77708
- SHA1 735f2392e9f74420c903f4815c772710bbb893a3
- SHA512 449806c788d357fd40dfb098634fe0ce4773ca3896485ec72f180d0a0b158c6ae2f2969a5efceaaba7abaec1419644b727933101325973f929aecb56ca5f346a
- SSDEEP 3072:Wghndatx1Vm0PQnJQybuQgES3Ce0RbbCGPZrj:ldau0PQnJQybuQgES3Ce0RbbBPZrj
- TLSH
  T130A41118AB74777743D76ACAF72BDE2D0D8080E6CB014E8F4309BAE891D6D41BA37954
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13
- Target
  package/steam_client_win32.manifest
- Size 8KB
- SHA256 6d9b46c070ebeb0d9b0b898f66492ef5f162d8265835f30a72123ad23202ee9c
- MD5 5b1ac0caefb4782609e4eb9ca0d08894
- SHA1 ca41e2a8e18d6a5a477948ed2c6ef25daca02d54
- SHA512 b9cce7c79c6c830da28868fd3a08d6c279ab0884be5c70eb8ccfb4abe4d0831509f4b391e6e9e6de683c805d3d30d9eba5d187e12ad6f05766167cb7a7776c60
- SSDEEP 192:0OHwpLQBIzgULKpHSLLZ5wGtOYevkRUc7m0Z+v:9HwpLQK/LAHSZ5ptOY8kRF7Jcv
- TLSH
  T11E0295633A44B1142A588B4B80746DE90FA8B54792BF2CEBDD2FCB1DD4B7D1678E7108
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral14
- Target
  package/steam_client_win64.installed
- Size 472KB
- SHA256 3d1f4ffc3593dd06c794d3a8c8320c49ac55f40c25eda0678b59602d9eb7c736
- MD5 7be34f9739a86b6ae8d2d01971e77708
- SHA1 735f2392e9f74420c903f4815c772710bbb893a3
- SHA512 449806c788d357fd40dfb098634fe0ce4773ca3896485ec72f180d0a0b158c6ae2f2969a5efceaaba7abaec1419644b727933101325973f929aecb56ca5f346a
- SSDEEP 3072:Wghndatx1Vm0PQnJQybuQgES3Ce0RbbCGPZrj:ldau0PQnJQybuQgES3Ce0RbbBPZrj
- TLSH
  T130A41118AB74777743D76ACAF72BDE2D0D8080E6CB014E8F4309BAE891D6D41BA37954
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15
- Target
  package/steam_client_win64.manifest
- Size 8KB
- SHA256 6d9b46c070ebeb0d9b0b898f66492ef5f162d8265835f30a72123ad23202ee9c
- MD5 5b1ac0caefb4782609e4eb9ca0d08894
- SHA1 ca41e2a8e18d6a5a477948ed2c6ef25daca02d54
- SHA512 b9cce7c79c6c830da28868fd3a08d6c279ab0884be5c70eb8ccfb4abe4d0831509f4b391e6e9e6de683c805d3d30d9eba5d187e12ad6f05766167cb7a7776c60
- SSDEEP 192:0OHwpLQBIzgULKpHSLLZ5wGtOYevkRUc7m0Z+v:9HwpLQK/LAHSZ5ptOY8kRF7Jcv
- TLSH
  T11E0295633A44B1142A588B4B80746DE90FA8B54792BF2CEBDD2FCB1DD4B7D1678E7108
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral16
- Target
  package/steam_win32_steamrow.zip.vz.03fa75087c010a48720b6aea4fa4f79ca3f9cea4_1879798
- Size 1.8MB
- SHA256 5d0610bb01abd667817b14f5666fd6f6e597f023f0e41b5144ee2acac7373a66
- MD5 69fc7a55573fbbbff39753348bdac62e
- SHA1 03fa75087c010a48720b6aea4fa4f79ca3f9cea4
- SHA512 93c4e1cd6e524dccb4ee4e38ec76f8daecc66e8952193443669eba677d515cfaf73312e2531ceeced571b656be74664e0d43a679b1cf7b87f6f9dbe016aaf2c0
- SSDEEP 49152:oNxHbwo3yM5YVcL8M+7dIHABKNOr31w1bMx1SKG6K7xvnDDtQsZ3:oTbUcL8BpIHABdL1qMx1SKvK7dH+e
- TLSH
  T15195333E7863953023F3E95E658724506DEA5F93CFC42CF2A912CC612BD91E51ADD20B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17
- Target
  package/steamui_websrc_all.zip.vz.8b0329c3c789be33795c5f7d850f0cae2808537a_24600569
- Size 23.5MB
- SHA256 060c78c1e56435eb9dc0c448546b18d35362081cdfa04e09085d1d4d4abe9468
- MD5 b1a8ebb6a9ee1267d538a59f7d7b617b
- SHA1 8b0329c3c789be33795c5f7d850f0cae2808537a
- SHA512 da9ad051a4650f58108393b3686276679a9dbdd712a3a7f0dc4d8895e9873277200f5f5aa5af54e8aa2fd5978048a119b02c17dd051ac3873078fa335cad64f9
- SSDEEP 393216:D6tsDj5JRMTf2ZsWQOyaSKxEDz3hvQWqTdf52By99DkKVavJVXg:D6yjxMTOUXKxEDzxvQpF9DzVaxVQ
- TLSH
  T187473384B1EA8905DFD9E585017A3880E7E9975B35EC8BACDEAFCE4DB49D430094F348
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral18
- Target
  steamui/movies/bigpicture_startup.webm
- Size 1.3MB
- SHA256 78e1f150f4cf528ed6768d40b84664209f7fbffb893bdf611bb0b5696938c2e6
- MD5 68197142dafc97dd33b923137b0d5535
- SHA1 987b498f000a6d0de5ddf914503487fe48faf6e0
- SHA512 8f065285566f618d41ffc1be2bb319dc48a7fa14bb8889881bbf1225df7dd75c0f2a37d99cc144d11df61eed28cb51e126fc214e55208904cad44f80960b8c1f
- SSDEEP 24576:HYpcl7kHqXU9KFJKJh5l7ePrxYMtMMxhxgVQPLjRZmwrkSmxrQJz8ejiMMKqch+K:Io7rXU24n3M27VkHRZ4SmxrQJzJiOZ
- TLSH
  T1B455335E9F0623F3F58BE93C2E0466082C99EDFD34A936D72ADE064A55E1754FC68C80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19
- Target
  steamui/movies/controller_generic_mouse_move_trigger_click.webm
- Size 464KB
- SHA256 3eeed5fa76d55cf027ded293665dbb94d408b71ef15c1e39714c010980d76233
- MD5 333668029c4e10cc18ae4a26db079720
- SHA1 8a92c92b96a3b318cbe67455bc517985a1cecf12
- SHA512 6cf88530699fe136352dfc28666bb269e8339ebd48dff271ecfadc4e3d1ede0d0be7c3f68e09ee74d8ff705b4e8747252e63eedb38d2456054d71ad2f1edf2dc
- SSDEEP 12288:P09ozfUlU48bUYUXsU5CvRMZ2rt+xbRkQHT:s9ozfUlU48SXf5CvSZ2sQWT
- TLSH
  T134A423A723769B16D48446F8D987D01C3E332A1EAFF6C4ED7C98447705F022DE18C9AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral20
- Target
  steamui/movies/controller_generic_thumbstick_move.webm
- Size 487KB
- SHA256 59bb7658d032a9ff86696d80e95816a885f911e0d784fdd45027b15591a7779f
- MD5 74578048ad3932597c3bab75fd7d5836
- SHA1 1579fccfe6421ac3f519c07873187b77beb71fcf
- SHA512 8b6ec90efc4fe0b2c64fc1d09602072a89962c81c501cb349b8ea82d38054b4b2d030d5808848023de6de1af4b084ac736bef473d5b9b739d847997bfd31ef8a
- SSDEEP 12288:mBkvfagUfEwn0uZv6aK41w81D03U5GOKTp+UTxNT:mB6igu0N4tD03U5GO6YUTD
- TLSH
  T1FFB4235C3754D94AEC200FF9E996412128262C154792D1FEB5EF2C7A20E3BBFF4846E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21
- Target
  steamui/movies/controller_generic_trackpad_and_thumbsticks_move.webm
- Size 315KB
- SHA256 34527cf2b260511c53f654f0726365bcb6930f54446f1e1eccbf3a8b0bb2034b
- MD5 c7ec124d48bda8044fbb6541fe7b9561
- SHA1 c7ad28f5018de20b8c7cdf921928ffee51093f64
- SHA512 817a47c363b19662bef0fb4df3c049858ee8a5981873cf4af351958f288947dc0808865feba7bd5ef8f657052a4427f2c9fb32a9490b1ab2fa99dc2aa624e709
- SSDEEP 6144:Ubz7yChsaC6OAGm0jFF8y3lXXeSLboBDYhYP3ujz1znyGjFXSXK:U3fhsa7Oe0jFp35e+cDYaW1zn7hYK
- TLSH
  T1656412D95326EA51CA8405B4C163E24531376D2A5BF2CAFC2C7A793A0173B2EE14C9FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral22
- Target
  package/steamui_websrc_sounds_all.zip.vz.a2b25775b33d943e54c45d176558de379111ef5f_3220470
- Size 3.1MB
- SHA256 6779c1a758435a0f926a66137f6a57d1e6fac14281f92209cd70d5818a598878
- MD5 413cbb900e31c49de33221f5ff8d08d9
- SHA1 a2b25775b33d943e54c45d176558de379111ef5f
- SHA512 31f6377b3b3cfc94d440071714980c75326c15896eeef189c0ab419b8d20d0d153c03556943711b2cd6ad10da700cfa3e28d9bd48f793d81ffd7becd4ffb8c8d
- SSDEEP 49152:io2XzoQh6TilAjWFnQUdt+3yyap8gfyIvDFda5xBD7jyp7dTmP1/TUjoVcfKd:N2YhjWKUdt+x/gfzWxBD6RcNTUMVge
- TLSH
  T1FEE53354662883DE0B9DA83DD1B655C9A839E64078A3B207D7DBC30ACB1C3DC52BBC75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23
- Target
  package/strings_all.zip.vz.b91af90b90a31492c3cef82fdf5d1f1ca5c7d671_2014576
- Size 1.9MB
- SHA256 56be92ae83eda5918f47b3be197ef9775a2255c363935fc3f3c875d30ad61603
- MD5 9f0fbd835e95ee88fbcc5e18f76604f3
- SHA1 b91af90b90a31492c3cef82fdf5d1f1ca5c7d671
- SHA512 772a1c32d3f41a26ddb39a40241ba7484a2d3315c187778a7b0bfc50068d9b31e3209f3d41ff05600ba9d8852ecf1c480046d7d516693ab7c25301ff2e3d9a91
- SSDEEP 49152:yQUrcFbTX+sMLuEfkOYd/ib8mL8VkmzuO8/OcoA8Z:lTX+luEZG+8m6kTz/xS
- TLSH
  T12C9533336974D4A2419FAF8A2A54CC48B1BE546CD35CB0551C4F0D0FCF22599FEB8AEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral24
- Target
  package/tenfoot_images_all.zip.vz.193cb8c4eb4446698ea2c0a9e8c4e6b6a623dac7_5572671
- Size 5.3MB
- SHA256 e1fee3beffa9d08a415a35ddc7d3141af6c44269c67e67aa0a3eea6e56889bd7
- MD5 ce671311034f93e30eef0e0998d15285
- SHA1 193cb8c4eb4446698ea2c0a9e8c4e6b6a623dac7
- SHA512 25a0719450fbfbf09b1bd4e525e696e8f72c673cc0909bd196cc3fed823e7b0822f062dbd2855c6c2ac6e465232586da64abccf84e9976e02cea3b016a45a1c3
- SSDEEP 98304:GkhPe4pzPRRacg9mzuxVXB9EYioUL4rvAi67jWWpYrsv0jtX34IAf:GOCUuxVReY/y4MFW4YwcjWII
- TLSH
  T1D94633721AD3CB78126C57E5A49FBC8EE78D5A593EE6700321094C43A4B234E6ECDE4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25
- Target
  win64/aom.dll
- Size 9.1MB
- SHA256 fbb0e54333700e7ffa9973a0099a96baf079f3b9179ab7ff2658e58012b79b62
- MD5 cc861a3557097e6667cbe57a89c9f6a5
- SHA1 0adbe9f0980f5f070739d7326cc35eb858bf5e33
- SHA512 d905aba6e2eb9cb736504d9526788c5fc58b8197eb65bc4e593ab1bde816a7c18ec18f4287c39013c814a2656bcf90e62fb0103d1461f7d606b2c2a5883395f1
- SSDEEP 196608:g0lkKRg5rgh/CGhiXy3fhjqs5V3TsLyyENCtJFQQQX1XTuqc/Mo9kfKe7V0ZlkIU:+KK5rgh/CGhiXy3fhjqs5V3TsLyyENCe
- TLSH
  T12FA68D85E36242F8D52BCD78867F664AA618301E832193FB26EC49352B73BD5573EF01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  win64/chromehtml.dll
- Size 1.6MB
- SHA256 77ab84fd7f03afa08776f50ef8671cd809e6e620f6eec68b2bf42d91b75a9b01
- MD5 bd914800f1e89baaa10139e7059ca8d7
- SHA1 ac595374192f7405ccffe84f337448263097c878
- SHA512 f4e2ee22ce5a25c5ebeb1280ba155a5bd72339469d8ac44c366b5d6b5aafd3baf0e1c95d668313e677624e0ed6bbdbbd47a5da2975c62da3bc904f13fed825b5
- SSDEEP 49152:EEegQu4HpoJfYvFxDdGBzWzYR5D86QVxMdMThyo/8:RKcR5D8LxMZ
- TLSH
  T1A0757C0BA5784059D47BD1BC8947690BEBF178020F60DBCF06A507AA6F23BE15E7E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  win64/dav1d.dll
- Size 2.7MB
- SHA256 8f9a171bf77b64e2d1233da4f51316b39f011af30de6da3a7dde9e1cb331fe27
- MD5 e0e1ae7c93b63fa075c99afae7ddff01
- SHA1 c049f90a4033e32fbe4db5adb06295f405fdefc8
- SHA512 2e83a6e00f28defba947ebb2b77ededf2dd731f227fef0598181d842c6febb3943a4e9635656174f15bac805b0de36d4382d44e6f31ca31638f15d22d452b25f
- SSDEEP 49152:+dPY5my2smTbXg+W1hlKWVUFdkM2CaDRv:EPu2smPg+W11B
- TLSH
  T138D5AE5DE2932199C67780B887B75B25EE20342D5324A7E31796C224BF13BE46E7EF04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  win64/filesystem_stdio.dll
- Size 256KB
- SHA256 0b33dde007047a09f15d06dabac045775990929d93fce7dbe0c6a1ed2a32d2d4
- MD5 58236461c051391706fce08dfa9d8245
- SHA1 0db4b6be9196446c7ed66ef319354b46f82d614a
- SHA512 1d8d1fffa0fca8f2847183d2dd54a115f7a5bef027f26c6cb2a1c0c1864db8b00f3adccc4401de177b043ce1391bb8cdd8a2c3587c8ae2116ad9d6122c29f9da
- SSDEEP 6144:zCvxGRwU182NJhoPJ74Abb13m9nWBRiLU:zixowU182NJidHPenWwU
- TLSH
  T1F9447D5A77D51CA9E8F7C678C595C60ED6B278120760DBFF03E0465A2F232D0663EB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  win64/gameoverlayui.dll
- Size 5.5MB
- SHA256 d13fe2d81a8098b880638d7b665fde8dfe763d1134a3be61646f567d636569b1
- MD5 16eeec254948943be4196f01370ee3ff
- SHA1 c8ac08ec0ab5c6b941bbf66c3fde7802baf95651
- SHA512 620e4f852310eee2c50d17d8627941ad0654a284fec414f6f3e10f817416bfddab64fcb5a11ccc3bea2dfcbbb88beb6c611071deeba9c2419752bdfec24a9381
- SSDEEP 98304:VIj+eBChH0t7fW50OwIurfgDj1THyfAV7t:VWTChH0t7fW5dwZgDj1TSfU5
- TLSH
  T133467C1ABBB910E8C6BEC17CD607951BE7F278152371A7CB06A086695F23BE1173E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  win64/libavif-16.dll
- Size 859KB
- SHA256 3eb1e3507b252199971ff0e862d0a379acacba9f3e72a7e945d0fcbbb69eb4b7
- MD5 3104d2c70c2627a8d08590d245540b01
- SHA1 9e1ab5546b65182b1b6582fe110c24852864a506
- SHA512 b989e27accd8946c3d4fac280f1ff913ecf33812c243f6202ffcba0ce82ea69be2c3f1d093441d2f2f016139e8ac05c547d8003c9ea0723128f45588e927afb9
- SSDEEP 12288:iAPNfl69EwVPvJD+756fs//B9ODWORcCmax+Qt0zG:N769El6kXrO7c/axWG
- TLSH
  T132159E6667EC02DAD077D13DC59A8B56E6B1B81443309BCB01E482A93F23BE85B3F715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  win64/vgui2_s.dll
- Size 4.0MB
- SHA256 964397270e90efc4a8d19f73089040b02735d1fbc260b2805c89e02d2f342a4d
- MD5 d9b112376aef6655a34d370b7b0551f6
- SHA1 6a594341bd154b8c98768584c0e99375d5758cc8
- SHA512 a40f00b80efcae55001817a488bc6eda55e7c8e3ff0fe536b08044ca28d85fd38f748c4458a25f082429dd574f54d45824ff88d35032fa43d1193bc6b23cde3b
- SSDEEP 49152:TlVwASOdGtlqJ4IU6iSoCMHytGldF1x+YX90uzGlznD+coS1e6fqg4ctPCpN7Oi6:DH+V1x+YyfnDV94ctP8qq0txE+KDthjs
- TLSH
  T1A5169E56A6B400F9D8BBC178C946951FEBF2781513B08BFF02A096791F237E16A3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detects Vidar Stealer

Vidar

Vidar family

Themida packer

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32