General

  • Target

    buildzzz.exe

  • Size

    356KB

  • MD5

    439a5a81b538acd111dc6875133dc84b

  • SHA1

    feb4530bc412aff642b55ae6c425421c6e9634ab

  • SHA256

    f593411dee93c3ef40aa1cb9cd54db078f0c38addacffa254289fff336625c7b

  • SHA512

    37e7d0aa055bb99decf8d6e997c4a59e2d4e72e0ac17db46a67aacb05d86d30d7b7d0a27af369dbbac945465066c5e2b4423e8dc0da021ccc101b8d895e1fb9d

  • SSDEEP

    6144:R2+XqGAdyvA944aSL0g7SLjxhDOfeNROhXkO6J5hUUZfA:R2+XqUvA92/gGLjzDqeNROhl6TF

Malware Config

Extracted

Family

vidar

Version

5.2

Botnet

9f47f7e29b8e585dc96017a8a65391df

C2

https://t.me/odyssey_tg

https://steamcommunity.com/profiles/76561199541261200

Attributes
  • profile_id_v2

    9f47f7e29b8e585dc96017a8a65391df

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.30 (KHTML, like Gecko) Chrome/115.0.1.0 Safari/537.30

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • buildzzz.exe
    .exe windows x86

    ab80a09718062de1bfe3a2139595aff5


    Headers

    Imports

    Sections