Overview

overview

10

Static

static

10

3d6dbd2ae9...JC.exe

windows7-x64

1

3d6dbd2ae9...JC.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d6dbd2ae9f02b23c439d7b444b0ba02_mafia_JC.exe

  • Size

    2.9MB

  • MD5

    3d6dbd2ae9f02b23c439d7b444b0ba02

  • SHA1

    14850856f522a6072cf83416dfa7c03acfcb4dcd

  • SHA256

    012574d1709a48be9351d7e89504d9140dc5b346774f8f5104be7d900a9f6222

  • SHA512

    a3ce4fdcb270db0eb0e49db66fba13f0861f638eeb35c2ebcdee0c1341c708a341f109cc96cceb11150c0f14ee6477ec6f251abf3211daeb174f9931bf271cbf

  • SSDEEP

    49152:IN+17nCkbPBzS7ULCbGyDboE8wrupidLNDNVeC1T5nY5tHfswXNWoUr3EHDMYCpk:nhpDBzS7UL+G3q5V7y5JB9WBUHIYCpsT

Score
10/10
ade6886d712001203847a2cacecbab8bvidar

Malware Config

Extracted

Family

vidar

Version

4.4

Botnet

ade6886d712001203847a2cacecbab8b

C2

https://steamcommunity.com/profiles/76561199235044780

https://t.me/headlist
Attributes
  • profile_id_v2

    ade6886d712001203847a2cacecbab8b

  • user_agent

    Mozilla/5.0 (Linux; Android 7.0; Pixel C Build/NRD91D; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/53.0.2785.124 Safari/537.36

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d6dbd2ae9f02b23c439d7b444b0ba02_mafia_JC.exe
    .exe windows x86

    2deb0170673a67617f054deaf02df626


    Headers

    Imports

    Sections