General

  • Target

    eed4ee9dcf9827exe_JC.exe

  • Size

    2.9MB

  • MD5

    eed4ee9dcf9827bf6f14cfcd6f8d3362

  • SHA1

    b1cd56c5636cce11c69bacd0e4153f02ca75ebd5

  • SHA256

    3141e3c1d12d6f24a961896ce134773b1e8b6127d652ef1f5701143f32014634

  • SHA512

    b524d52dc0e1f6b058a535314ac08cfcf38b2da1288770a72825b4adea317b7bdc1190a44075074fbfffe8684eb81a0ebf6ae6a425563c0a6047e0c79f5f1102

  • SSDEEP

    49152:bdFm/ICkbPBzS7ULCbGyDboE8wrupidLNDNVeC1T5nY5tHfswXNWoUr3EHDMYCpo:BFXpDBzS7UL+G3q5V7y5JB9WBUHIYCpk

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

076239fffceeb88ff5fe3c82df6cb13b

C2

https://steamcommunity.com/profiles/76561199511129510

https://t.me/rechnungsbetrag

Attributes
  • profile_id_v2

    076239fffceeb88ff5fe3c82df6cb13b

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eed4ee9dcf9827exe_JC.exe
    .exe windows x86

    1c84813089033efc0f55654edba31e01


    Headers

    Imports

    Sections