Overview

overview

10

Static

static

10

dridex

windows10-2004-x64

7

Resubmissions

07-08-2023 04:15

230807-evl7ssef9w 10

01-08-2023 22:54

230801-2vkejacg3z 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05e67c0721526e7dd9b6ef6cdc391d656399d9346b0e9e7e563c160fd0c4fa79

  • Size

    467KB

  • MD5

    df0c22316b7b50ee84b60b201fb837ae

  • SHA1

    081aef95af7a81682d2c882b91b299cc63efcf2e

  • SHA256

    05e67c0721526e7dd9b6ef6cdc391d656399d9346b0e9e7e563c160fd0c4fa79

  • SHA512

    377f9b758c8d1d61ad04b56919581a055f5c61aae9edd5bcd19279e321819a3a42cd406c714f1dfdfb0c4f7ea10d277259cde13842a2870b5ea8ac7f449e876e

  • SSDEEP

    12288:7MqFYULoWzniwtgGbl6mw/YAMOtwhF5fBqylCnwe+:7MqFbniCgGZ6T/DMO25fzonwd

Score
10/10
c2438bb36e46960f59a09a0a267eeb74vidar

Malware Config

Extracted

Family

vidar

Version

5

Botnet

c2438bb36e46960f59a09a0a267eeb74

C2

https://t.me/versozaline

https://steamcommunity.com/profiles/76561199532186526
Attributes
  • profile_id_v2

    c2438bb36e46960f59a09a0a267eeb74

  • user_agent

    Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05e67c0721526e7dd9b6ef6cdc391d656399d9346b0e9e7e563c160fd0c4fa79
    .exe windows x86

    eb946a5d419bb360e395b3426711b797


    Headers

    Imports

    Sections