General

  • Target

    2a29d60c3fc57aexeexeexeex.exe

  • Size

    335KB

  • MD5

    2a29d60c3fc57ae863bfe725f6be64eb

  • SHA1

    bcf1f470ad6d2998bcd3e5516ab42064985a6bd5

  • SHA256

    565c089002892cf59e15ca6b9b4bad635a0f72ba8e2e277f41521bd80e6cd9bd

  • SHA512

    b422f14fdc2c0559d04ce76f77f884d77a069c85a2b913dc068b0195a07832fa081134187c4b743702e662f636744547be811f1047bc96ad69132377aaa20866

  • SSDEEP

    6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTA10qhh4TAjrt:qtUGfVwUFzRG6EQ0POfiTTA0qeAjrt

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

a81bcf59d85e6e13257840e65b9d1da8

C2

https://steamcommunity.com/profiles/76561199511129510

https://t.me/rechnungsbetrag

Attributes
  • profile_id_v2

    a81bcf59d85e6e13257840e65b9d1da8

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a29d60c3fc57aexeexeexeex.exe
    .exe windows x86

    1c84813089033efc0f55654edba31e01


    Headers

    Imports

    Sections