Analysis
-
max time kernel
160s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
19-11-2022 15:23
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
windows7-x64
13 signatures
150 seconds
General
-
Target
file.exe
-
Size
430KB
-
MD5
ba8f7dbb137ea980ff835ed2f9b4c1ab
-
SHA1
18548f5ed8ea60d176cdbee2902e777c3f68c0fb
-
SHA256
5554f64389cfe61a4be7367444b2837d216d921235458c658b1be6936d0d78a9
-
SHA512
948f4a157527bae3b5bea7e9c2fcd6c0759ca6ec6637d167fec45367700f7737b10007abb0cab7e7350d5b759c9fa531facede7ae484fae2b8060574fee32683
-
SSDEEP
6144:j71UzWPLjfAXL72qjjD3wLvgmLc9CujpPnFwCLLObfwB:VUzjXvjjjDgkS+xqC3O
Malware Config
Extracted
Family
vidar
Version
55.7
Botnet
937
C2
https://t.me/deadftx
https://www.ultimate-guitar.com/u/smbfupkuhrgc1
Attributes
-
profile_id
937
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3864-132-0x0000000000AD3000-0x0000000000AFF000-memory.dmpFilesize
176KB
-
memory/3864-133-0x0000000000940000-0x000000000098A000-memory.dmpFilesize
296KB
-
memory/3864-134-0x0000000000400000-0x000000000086E000-memory.dmpFilesize
4.4MB
-
memory/3864-135-0x0000000000AD3000-0x0000000000AFF000-memory.dmpFilesize
176KB