General
- Target 02b7edadae376ef4e7ffc713f413aa50efb3e329c4a45a45f3cb726fb10bb2f5.exe
- Size 8.2MB
- Sample260528-dytwdaex5j
- SHA256 02b7edadae376ef4e7ffc713f413aa50efb3e329c4a45a45f3cb726fb10bb2f5
- MD5 ee92509e85099451fdb94f09bc2d5f94
- SHA1 73bfe725641db2b381c46f601ea872c31461f72a
- SHA512 abead2ca79c3612233926a42900b90817330ac26b2633da3795ccca682e4f023df939426af5ded5d612bc6096b4133381b23e3018b03696f6ae9f711f4c18433
- SSDEEP 49152:cZZDZ3Rgj02W0et2ZHpGFnRAwfSSTO7dAKYYnqBeId+W0+9Ur9AX44cg44qKlGQL:cPOkz7MVC
- TLSH T1328609AB3A708168C169813EC0938BCD97F37275773BC2E7D26107A94E096D45E3A763
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
02b7edadae376ef4e7ffc713f413aa50efb3e329c4a45a45f3cb726fb10bb2f5.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
02b7edadae376ef4e7ffc713f413aa50efb3e329c4a45a45f3cb726fb10bb2f5.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
18.5
Botnet
-
a93ec7551f3af6e42cc58fbd67f14197
C2
-
https://telegram.me/mm8hyx
-
https://steamcommunity.com/profiles/76561198728266687
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0
Targets
-
- Target 02b7edadae376ef4e7ffc713f413aa50efb3e329c4a45a45f3cb726fb10bb2f5.exe
- Size 8.2MB
- SHA256 02b7edadae376ef4e7ffc713f413aa50efb3e329c4a45a45f3cb726fb10bb2f5
- MD5 ee92509e85099451fdb94f09bc2d5f94
- SHA1 73bfe725641db2b381c46f601ea872c31461f72a
- SHA512 abead2ca79c3612233926a42900b90817330ac26b2633da3795ccca682e4f023df939426af5ded5d612bc6096b4133381b23e3018b03696f6ae9f711f4c18433
- SSDEEP 49152:cZZDZ3Rgj02W0et2ZHpGFnRAwfSSTO7dAKYYnqBeId+W0+9Ur9AX44cg44qKlGQL:cPOkz7MVC
- TLSH T1328609AB3A708168C169813EC0938BCD97F37275773BC2E7D26107A94E096D45E3A763
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Vidar Stealer