Overview

overview

10

Static

static

10

3020-581-0...ry.exe

windows7-x64

1

3020-581-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3020-581-0x0000000000400000-0x00000000005C2000-memory.dmp

  • Size

    1.8MB

  • Sample

    231005-kklq6shf9v

  • MD5

    97b3d45d826d3286ae9395691363d3b8

  • SHA1

    cea300f5baebec353d9761a30fa5fd4becb43250

  • SHA256

    b0cba91cd39b643f363a03e5c7e25296ac54919cb566b433e4eae17d18b781e0

  • SHA512

    23637af586140ed259db86dfe075173452fff3970aa11cb11218c1fcfd628e1a9017f46ca3add46533553c31d4142bdf219824c24b74834002091f9316b8385a

  • SSDEEP

    6144:+A+1e4b30YI1zA7I4ucur1srMPOZcF9IRS/hxOToXD3PluV:QXbkSlNrmOZcF92StXDNs

Score
10/10
vidar4841d6b1839c4fa7c20ecc420b82b347

Malware Config

Extracted

Family

vidar

Version

5.9

Botnet

4841d6b1839c4fa7c20ecc420b82b347

C2

https://steamcommunity.com/profiles/76561199557479327

https://t.me/grizmons
Attributes
  • profile_id_v2

    4841d6b1839c4fa7c20ecc420b82b347

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 OPR/104.0.0.0

Targets

    • Target

      3020-581-0x0000000000400000-0x00000000005C2000-memory.dmp

    • Size

      1.8MB

    • MD5

      97b3d45d826d3286ae9395691363d3b8

    • SHA1

      cea300f5baebec353d9761a30fa5fd4becb43250

    • SHA256

      b0cba91cd39b643f363a03e5c7e25296ac54919cb566b433e4eae17d18b781e0

    • SHA512

      23637af586140ed259db86dfe075173452fff3970aa11cb11218c1fcfd628e1a9017f46ca3add46533553c31d4142bdf219824c24b74834002091f9316b8385a

    • SSDEEP

      6144:+A+1e4b30YI1zA7I4ucur1srMPOZcF9IRS/hxOToXD3PluV:QXbkSlNrmOZcF92StXDNs

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks