General

  • Target

    8c2dc600edfde4abc95b04869f00d0337c1f8ca7a605f5744608dabf354ad95f.zip

  • Size

    7.1MB

  • MD5

    d3a6dcff86372be69810da58fe6bfcd4

  • SHA1

    def3193fe669ab9cee904d93ca2aa184c928b473

  • SHA256

    8c2dc600edfde4abc95b04869f00d0337c1f8ca7a605f5744608dabf354ad95f

  • SHA512

    22483fcbc53b9b9f3076aeeaf8017e3c36b9c3cd1085f46a333bb0b40132a1a0f62a8b0a4368f53ca2e7fd50b7f9ef5ca0ba6101966e7fa1432e3225a0e23b71

  • SSDEEP

    196608:feOyud4uivGNof4YjrRTg31ZyBoeVoXGe7JNo:OcevMJY3RT2CBcWe7zo

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

1134

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

http://5.161.120.43:80

Attributes
  • profile_id

    1134

Signatures

Files

  • 8c2dc600edfde4abc95b04869f00d0337c1f8ca7a605f5744608dabf354ad95f.zip
    .zip
  • 38b34e3b4ebe93cf20eef8a50f10a2e9.exe
    .exe windows x86

    60d1f65b3bb1173c7310ea8cb33728ed


    Headers

    Imports

    Sections