General

  • Target

    95b359fd47d0a2exeexeexeex.exe

  • Size

    292KB

  • MD5

    95b359fd47d0a20049eae9e8d7446e9f

  • SHA1

    67b024bdb6a82d218c63ed51819acc766fd0905d

  • SHA256

    b09f9be95e396d508ec4737c8c796b0c4ab2ad45e07d0a4bcde8e47e4ab2babe

  • SHA512

    f6aacb2ca6f3f08eb32e6f7e5cc3665a170e18395ea3a33dbea7be528bb2a2d8975688ccbff2c9356ab22fd295aba1c36ad7051b4d30ac70aaf8d16f850dea2b

  • SSDEEP

    6144:0nfgOFRUQZ2VcUoSSwu5To9EPfQcB/3iYl7p0zhuUhl:0lFucUoSSwu5To9EgcB/3iYlNEhl

Score
10/10

Malware Config

Extracted

Family

vidar

Version

55.7

Botnet

1537

C2

https://t.me/deadftx

https://www.ultimate-guitar.com/u/smbfupkuhrgc1

http://116.202.2.1:80

Attributes
  • profile_id

    1537

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 95b359fd47d0a2exeexeexeex.exe
    .exe windows x86

    c8cb3b2b458252307694817e0bb40a75


    Headers

    Imports

    Sections