Overview

overview

10

Static

static

10

42d8e6b1c2...ex.exe

windows7-x64

3

42d8e6b1c2...ex.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    42d8e6b1c251baexeexeexeex.exe

  • Size

    337KB

  • MD5

    42d8e6b1c251ba982f4869c0da3ce745

  • SHA1

    4964a1bcb2255059d4e594c0c223f310e6f5dff7

  • SHA256

    466eb9b7bb6bdee829c53136488d61c92a521e6f3079b9d0fc8166f1a3071cbe

  • SHA512

    b340b63496105a34f1eb21a1032b1aa32298ae88eeaea5b1be96a368beec2620b6f5fd4e246e603e7122aed4342addfab9f3b3cd9cc36fd6564a0e54e329fe6b

  • SSDEEP

    6144:dtvmJg9rko8B4/xw8ksPSGbEgajKliSmRiUMhcnNbdz/:dtvmJapksPS4ELIiSLULNbdz/

Score
10/10
ff7146c223f4c9503ae05a5610dafd63vidar

Malware Config

Extracted

Family

vidar

Version

4.1

Botnet

ff7146c223f4c9503ae05a5610dafd63

C2

https://t.me/task4manager

http://77.105.143.198:80

https://steamcommunity.com/profiles/76561199510444991
Attributes
  • profile_id_v2

    ff7146c223f4c9503ae05a5610dafd63

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 Edg/112.0.1722.34

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 42d8e6b1c251baexeexeexeex.exe
    .exe windows x86

    1c84813089033efc0f55654edba31e01


    Headers

    Imports

    Sections