ThreatFox IOC Database

You are viewing the ThreatFox database entry for sha256_hash ebaa6717e0011710c3cc8f4b2fd7fb767a3a0e4d01415957d9b24919650a7a09.

Database Entry


IOC ID:1854562
IOC: ebaa6717e0011710c3cc8f4b2fd7fb767a3a0e4d01415957d9b24919650a7a09
IOC Type :sha256_hash
Threat Type :payload
Malware: Unknown Stealer
Confidence Level : Confidence level is high (100%)
Is compromised? : False
First seen:2026-07-21 05:20:07 UTC
Last seen:never
UUID:9cbffdad-848f-11f1-8973-42010aa4000a
Reporter emmpallis
Reward 5 credits from ThreatFox
Tags:dll sideloading stealer Vidar

Avatar
emmpallis
DLL loaded into MpDlpService.exe -> "715b4174065916a6412f60b3c10664b323dc737fd717ab09627083be34626fe0 " (legitimate microsoft data loss prevention service) that turns it into vidar & mby some custom golang malware!