General
- Target file.exe
- Size 234KB
- Sample240331-m3dvdsae4s
- SHA256 58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff
- MD5 d0492d61a010c75b69a21b31761ac655
- SHA1 0168759aebd253fed1dd89a44d260f6eadc94a2d
- SHA512 e4552a5bcf7f6b7911a87873d6d168d44f4ab0f351c822b5ec3b14b5db359ce0fadecac7bc032111197243b79047cbe1203e4fa9afc558c9f9e2a0ecb28eb52d
- SSDEEP 6144:AhAZ0mc86LHVUCAlfzHORKOrfIrIEgcNxHookuvxNimwE5R:ImcJLHVpAl7o3rfwrYt+7/r
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240319-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
C2
-
https://steamcommunity.com/profiles/76561199658817715
-
https://t.me/sa9ok
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Targets
-
- Target file.exe
- Size 234KB
- SHA256 58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff
- MD5 d0492d61a010c75b69a21b31761ac655
- SHA1 0168759aebd253fed1dd89a44d260f6eadc94a2d
- SHA512 e4552a5bcf7f6b7911a87873d6d168d44f4ab0f351c822b5ec3b14b5db359ce0fadecac7bc032111197243b79047cbe1203e4fa9afc558c9f9e2a0ecb28eb52d
- SSDEEP 6144:AhAZ0mc86LHVUCAlfzHORKOrfIrIEgcNxHookuvxNimwE5R:ImcJLHVpAl7o3rfwrYt+7/r
- MD5 SHA1 SHA512 SSDEEP
-
Detect Vidar Stealer
-
Suspicious use of SetThreadContext