Analysis
-
max time kernel
145s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
01-06-2023 13:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
D7C08A686196D6C28D4F79588AEC7A0CA0123E35C57A9.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
General
-
Target
D7C08A686196D6C28D4F79588AEC7A0CA0123E35C57A9.exe
-
Size
558KB
-
MD5
e91cc2e537362de1efdbcfd78cc6c662
-
SHA1
0537b130c780406acbb7ecfc85ce103f944f41c7
-
SHA256
d7c08a686196d6c28d4f79588aec7a0ca0123e35c57a9b1362e9ac0e381c176b
-
SHA512
25658cabfefb93ec031a7cb6837ce81028df3873f0c8191361a44c275573c77cdf038bf01b00e121e10565cf49768e45ba9442cb19f9772daaa50244b08ebd8f
-
SSDEEP
12288:w8V18UCk9UOjfCTBNZtZYRD8pd0yyC74awwi5fK2:rf9/+3lKDcyVG4Jwi5fn
Malware Config
Extracted
Family
vidar
Version
9
Botnet
237
C2
http://hotticketsale.com/
Attributes
-
profile_id
237
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4624-134-0x0000000000400000-0x0000000000520000-memory.dmpFilesize
1.1MB