Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/03/2026, 12:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
General
- Target 1.exe
- Size 13.6MB
- Sample260301-n7ccssfx2f
- SHA256 983c84dfdd544032a1fad4d3ecba68246bef67c8cbc8c67822d42d86097949f0
- MD5 f083b14132394dafa18cfa4b7df42992
- SHA1 05f0369d179fd41920f44a44f0c5243a0036abf2
- SHA512 b8fd92545105cf94350bb6f3e13d48f99381a83c5479056dd77cca7132423d7a4d4f01af1caf7e8d13cba633874704fa2e67bda8e125a2ed2c3956b67ece19ac
- SSDEEP 49152:dfH6uLQa7DDHSgaVxb5uBoWVCJGSVOvfz+ZyefFAkOILbvSy6fWixMGwOI/e8bBO:afbvYfLRXJbWCnIkjJd/8+pLqsWadQI
- TLSH T17FE6F77B76918569C11F823AC0B39B4494F370BD0F36CAEB43B00F685A5A5D05E7A6EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Vidar Stealer 2 IoCs
resource yara_rule behavioral1/memory/4884-7-0x0000000140000000-0x00000001400F2000-memory.dmp family_vidar_v15 behavioral1/memory/4884-21-0x0000000140000000-0x00000001400F2000-memory.dmp family_vidar_v15 - Vidar family