Overview

overview

10

Static

static

10

860-54-0x0...ry.exe

windows7-x64

860-54-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    860-54-0x0000000000DE0000-0x000000000146D000-memory.dmp

  • Size

    6.6MB

  • MD5

    83dbd99e3479f40d338a9160625ee04e

  • SHA1

    9ed09a84802bce6df5bc85ca08d8fbf719e3e966

  • SHA256

    02d2bc226f481de1ce8ec00709377616dfc74dd6a5d9a3cf09f1e5340e9dc830

  • SHA512

    e42a35c5393892015f85453fcec30d948c1244ed58a48cbdeca20d26f2899190e3ec4815cf7bf0ce7ebc2016c92997fb3fe5a86a42cce21ddabe32db70165b23

  • SSDEEP

    98304:3RE28eDwDrnOgJ1m7TyBttCdrK+DjktclkBCY+2vE79BjrQ/L9nVRedMb3jqpasu:SHeCrnOb7OXCd/DmculwTExVReE

Score
10/10
bf57fe2fae2974604afc18ab750c7063vidar

Malware Config

Extracted

Family

vidar

Version

4

Botnet

bf57fe2fae2974604afc18ab750c7063

C2

https://steamcommunity.com/profiles/76561199508624021

https://t.me/looking_glassbot
Attributes
  • profile_id_v2

    bf57fe2fae2974604afc18ab750c7063

  • user_agent

    Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 860-54-0x0000000000DE0000-0x000000000146D000-memory.dmp
    .exe windows x86


    Headers

    Sections