General

  • Target

    55aec8e34e6e0aexeexeexeex.exe

  • Size

    335KB

  • MD5

    55aec8e34e6e0afa7ede1f80dd754419

  • SHA1

    1dfea4c1b3c5271c2b59e9e4413bd725f3e3b5d4

  • SHA256

    315718c73e874ff693a49c68fbf283bfedd609af4a077a6f22877233ba3e84e1

  • SHA512

    45e2f6d51e834a5452a176fbb3713576da230ca2682fa52ab790b58054dfd7475e86a6fd55ecf73cdc593486e1cb695dd6f6e7b8d609f984b3c5e72693c542c3

  • SSDEEP

    6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTC10qhh4nAjrt:qtUGfVwUFzRG6EQ0POfiTTK0qOAjrt

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

a81bcf59d85e6e13257840e65b9d1da8

C2

https://steamcommunity.com/profiles/76561199511129510

https://t.me/rechnungsbetrag

Attributes
  • profile_id_v2

    a81bcf59d85e6e13257840e65b9d1da8

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 55aec8e34e6e0aexeexeexeex.exe
    .exe windows x86

    1c84813089033efc0f55654edba31e01


    Headers

    Imports

    Sections