Overview

overview

10

Static

static

10

2032-351-0...ry.exe

windows7-x64

1

2032-351-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2032-351-0x0000000000400000-0x000000000046A000-memory.dmp

  • Size

    424KB

  • Sample

    230608-l5jb8aee9z

  • MD5

    832112814203bcf05ec55b36e7ccf0b9

  • SHA1

    b3aa88bc5b935c58b5eba62ef5c49ec1e754524c

  • SHA256

    aaf697b513b59eb0d37e1f415ef7187d8f1168a523d228fd4867bd3da7b4c884

  • SHA512

    2371de843639e27af6cf064214acb1bf1994dc708ca078622014b902bde46d2fe715524410e925b199d07c0438136ab623d73f99d043c3223ed37691af7db24a

  • SSDEEP

    6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTV10qhhTCAjrt:qtUGfVwUFzRG6EQ0POfiTTL0q2Ajrt

Score
10/10
vidara81bcf59d85e6e13257840e65b9d1da8

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

a81bcf59d85e6e13257840e65b9d1da8

C2

https://steamcommunity.com/profiles/76561199511129510

https://t.me/rechnungsbetrag
Attributes
  • profile_id_v2

    a81bcf59d85e6e13257840e65b9d1da8

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Targets

    • Target

      2032-351-0x0000000000400000-0x000000000046A000-memory.dmp

    • Size

      424KB

    • MD5

      832112814203bcf05ec55b36e7ccf0b9

    • SHA1

      b3aa88bc5b935c58b5eba62ef5c49ec1e754524c

    • SHA256

      aaf697b513b59eb0d37e1f415ef7187d8f1168a523d228fd4867bd3da7b4c884

    • SHA512

      2371de843639e27af6cf064214acb1bf1994dc708ca078622014b902bde46d2fe715524410e925b199d07c0438136ab623d73f99d043c3223ed37691af7db24a

    • SSDEEP

      6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTV10qhhTCAjrt:qtUGfVwUFzRG6EQ0POfiTTL0q2Ajrt

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks