Overview

overview

10

Static

static

10

9618f1c3f0895e_JC.exe

windows7-x64

3

9618f1c3f0895e_JC.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9618f1c3f0895e_JC.exe

  • Size

    335KB

  • Sample

    230717-tpfv6adc54

  • MD5

    9618f1c3f0895e4a02dce8f7bd7f9b55

  • SHA1

    00f41a4afca156475096aeba3d308eae1719b2c9

  • SHA256

    bafefb620b656c693341ece792d38ee61d324d0c46b0993a8153769a6d8a00fd

  • SHA512

    fed266831e2f87ac4b42233497cda68f377150517d809a2db2faf8004f6af7c733cd65724c1e4f364a9859800a3c54b3ae3930840fa073dc75d05d2d24a8f013

  • SSDEEP

    6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTF10qhh4QAjrt:qtUGfVwUFzRG6EQ0POfiTT70qVAjrt

Score
10/10
vidara81bcf59d85e6e13257840e65b9d1da8

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

a81bcf59d85e6e13257840e65b9d1da8

C2

https://steamcommunity.com/profiles/76561199511129510

https://t.me/rechnungsbetrag
Attributes
  • profile_id_v2

    a81bcf59d85e6e13257840e65b9d1da8

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Targets

    • Target

      9618f1c3f0895e_JC.exe

    • Size

      335KB

    • MD5

      9618f1c3f0895e4a02dce8f7bd7f9b55

    • SHA1

      00f41a4afca156475096aeba3d308eae1719b2c9

    • SHA256

      bafefb620b656c693341ece792d38ee61d324d0c46b0993a8153769a6d8a00fd

    • SHA512

      fed266831e2f87ac4b42233497cda68f377150517d809a2db2faf8004f6af7c733cd65724c1e4f364a9859800a3c54b3ae3930840fa073dc75d05d2d24a8f013

    • SSDEEP

      6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTF10qhh4QAjrt:qtUGfVwUFzRG6EQ0POfiTT70qVAjrt

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks