Overview

overview

10

Static

static

10

2396-2-0x0...ry.exe

windows7-x64

1

2396-2-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2396-2-0x0000000000400000-0x00000000005C7000-memory.dmp

  • Size

    1.8MB

  • Sample

    231005-ky6cqshh5y

  • MD5

    1b9261f3c3d58fd0381b226e98c08f16

  • SHA1

    1eb1ee98ca610b640a03869dc131d56b4ac080ae

  • SHA256

    464b58be4273c931ce4c3a3ddd79db71e89603e4121ba25cb992eb46a58533fc

  • SHA512

    1fd7dbe5d3794905ea228a56f0e892a13e1e1da73fdd910e4f1ef58c486ba8dd78234004feaf6273a5d717c83f033ca72b6f0181f782f1e90ec1b969f10bead2

  • SSDEEP

    6144:+A+1e4b30YI1zA7I4ucur1srMPOZcF9IRS/hxLaXD3Pl12:QXbkSlNrmOZcF92SeXDN12

Score
10/10
vidar4841d6b1839c4fa7c20ecc420b82b347

Malware Config

Extracted

Family

vidar

Version

5.9

Botnet

4841d6b1839c4fa7c20ecc420b82b347

C2

https://steamcommunity.com/profiles/76561199557479327

https://t.me/grizmons
Attributes
  • profile_id_v2

    4841d6b1839c4fa7c20ecc420b82b347

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 OPR/104.0.0.0

Targets

    • Target

      2396-2-0x0000000000400000-0x00000000005C7000-memory.dmp

    • Size

      1.8MB

    • MD5

      1b9261f3c3d58fd0381b226e98c08f16

    • SHA1

      1eb1ee98ca610b640a03869dc131d56b4ac080ae

    • SHA256

      464b58be4273c931ce4c3a3ddd79db71e89603e4121ba25cb992eb46a58533fc

    • SHA512

      1fd7dbe5d3794905ea228a56f0e892a13e1e1da73fdd910e4f1ef58c486ba8dd78234004feaf6273a5d717c83f033ca72b6f0181f782f1e90ec1b969f10bead2

    • SSDEEP

      6144:+A+1e4b30YI1zA7I4ucur1srMPOZcF9IRS/hxLaXD3Pl12:QXbkSlNrmOZcF92SeXDN12

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks