Overview

overview

10

Static

static

10

1100-72-0x...ry.exe

windows7-x64

1100-72-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1100-72-0x0000000000240000-0x0000000000B1C000-memory.dmp

  • Size

    8.9MB

  • MD5

    94376e15b5e9ff1016ff27c5131bc2ac

  • SHA1

    5d3f28ac999174d5c6257409657351e01d2163eb

  • SHA256

    6875ad81664dacf74309a5c9814cab1d96fc2386fffe938547f22c239b2fce1e

  • SHA512

    dba90722114dc995372371a5473df4d63d082ef20388d805aede6bf5dcce0114bea4c0262928fbd77f65e2b484b57ffdc11041259477b4059cd9b5a97d22cf2d

  • SSDEEP

    196608:JGI8Ac2uhWBNvUjuaDbuRRpScl5sa5m12jcx0R7Ra1unKXB:JGbAYhWBNZgbURm1ofKx

Score
10/10
98d0d34b4e35131252d3d615526218eavidar

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

98d0d34b4e35131252d3d615526218ea

C2

https://steamcommunity.com/profiles/76561199511129510

https://t.me/rechnungsbetrag
Attributes
  • profile_id_v2

    98d0d34b4e35131252d3d615526218ea

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1100-72-0x0000000000240000-0x0000000000B1C000-memory.dmp
    .exe windows x86


    Headers

    Sections