vidar | c0b9861aa16d84af9060aa4f09bee129e769978bbe4065c9edfa90be532d2778[.]bin[.]exe

General

Target
c0b9861aa16d84af9060aa4f09bee129e769978bbe4065c9edfa90be532d2778.bin.exe
Size 6.1MB
Sample260920-anz3vsda68
SHA256 c0b9861aa16d84af9060aa4f09bee129e769978bbe4065c9edfa90be532d2778
MD5 9718604070d0678c900c845a093753b5
SHA1 0e38e16bbfab79af1b03a7d2c7dbfa6cc5a3117a
SHA512 a5bc5779514ddb15cb88eee82b4cf1a97365f2499504f618d453a4d22ab6b59e7565f082ad86732d2268ae2d656126eda75fab106b9187e63a33e328890c0133
SSDEEP 49152:dgLG+l8+OMrdSPvq2eev2holHSyF9/KhyDlGJnUx+E:d28+OMrMPvdejY
TLSH
T18956D82973C88A21C873013A5D58F4C4FE355D3321659D2A31CE3EA31B76DA2B3AFA55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

stealer vidar

Vidar Stealer 1 IoCs

stealer

resource	yara_rule
sample	family_vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0b9861aa16d84af9060aa4f09bee129e769978bbe4065c9edfa90be532d2778.bin.exe

c0b9861aa16d84af9060aa4f09bee129e769978bbe4065c9edfa90be532d2778.bin.exe

.exe 6.1MB

SHA256 c0b9861aa16d84af9060aa4f09bee129e769978bbe4065c9edfa90be532d2778
MD5 9718604070d0678c900c845a093753b5
SHA1 0e38e16bbfab79af1b03a7d2c7dbfa6cc5a3117a
SHA512 a5bc5779514ddb15cb88eee82b4cf1a97365f2499504f618d453a4d22ab6b59e7565f082ad86732d2268ae2d656126eda75fab106b9187e63a33e328890c0133
SSDEEP 49152:dgLG+l8+OMrdSPvq2eev2holHSyF9/KhyDlGJnUx+E:d28+OMrMPvdejY
TLSH
T18956D82973C88A21C873013A5D58F4C4FE355D3321659D2A31CE3EA31B76DA2B3AFA55
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

5758976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths