Overview

overview

10

Static

static

10

3508-344-0...ry.exe

windows7-x64

1

3508-344-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3508-344-0x0000000000400000-0x000000000046C000-memory.dmp

  • Size

    432KB

  • Sample

    230328-jzwn9ahg52

  • MD5

    375dc54b9e4ba255e535c5a4b9f264fa

  • SHA1

    bc298b6d3d9bdb39b00d06950273d51c13d68ca3

  • SHA256

    919737f2d4e67da687f4b43ed004032403a5931b4bb60e5b2a6882de79ec39f0

  • SHA512

    91ced8bc44b43a561ad6fcc318170a854d7c87e079eb60eacec22e7ebf795a55946fb0dc982af4b3aa342d0b98802dce75705239c60c85d357844484dbb3c114

  • SSDEEP

    6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGio/9o0wVEhKhJOa:cuQRHexo0n24zVK32RRVmGiqwVbhY

Score
10/10
vidar00d92484c9b27bc8482a2cc94cacc508

Malware Config

Extracted

Family

vidar

Version

3.1

Botnet

00d92484c9b27bc8482a2cc94cacc508

C2

https://steamcommunity.com/profiles/76561199472266392

https://t.me/tabootalks

http://135.181.26.183:80
Attributes
  • profile_id_v2

    00d92484c9b27bc8482a2cc94cacc508

  • user_agent

    Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 OPR/91.0.4516.79

Targets

    • Target

      3508-344-0x0000000000400000-0x000000000046C000-memory.dmp

    • Size

      432KB

    • MD5

      375dc54b9e4ba255e535c5a4b9f264fa

    • SHA1

      bc298b6d3d9bdb39b00d06950273d51c13d68ca3

    • SHA256

      919737f2d4e67da687f4b43ed004032403a5931b4bb60e5b2a6882de79ec39f0

    • SHA512

      91ced8bc44b43a561ad6fcc318170a854d7c87e079eb60eacec22e7ebf795a55946fb0dc982af4b3aa342d0b98802dce75705239c60c85d357844484dbb3c114

    • SSDEEP

      6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGio/9o0wVEhKhJOa:cuQRHexo0n24zVK32RRVmGiqwVbhY

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks