Overview

overview

10

Static

static

10

2460-551-0...ry.exe

windows7-x64

1

2460-551-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2460-551-0x0000000000400000-0x00000000005C0000-memory.dmp

  • Size

    1.8MB

  • Sample

    231009-ys45daga6z

  • MD5

    8ca5b94ea166a6db6f7ee9843a5d3a6c

  • SHA1

    7f1cd28f2551a5c57195a0dad1548e1659941383

  • SHA256

    2c0b0407c16b1b6e9385399d1ad26d81bc2382b3801e41670df616d97c5be7f8

  • SHA512

    9ba09ddec73c1a76055767b115ba879aeed320a542c63d77c7e559685d48f68dc8102baaa40be397acb4b53f6a1dc0286a5262f001c07edd5ea5bc86d4d233c3

  • SSDEEP

    6144:+A+1e4b30YI1zA7I4ucur1srMPOZcF9IRS/hxzc8XD3PlJy:QXbkSlNrmOZcF92StXDNJ

Score
10/10
vidar4841d6b1839c4fa7c20ecc420b82b347

Malware Config

Extracted

Family

vidar

Version

5.9

Botnet

4841d6b1839c4fa7c20ecc420b82b347

C2

https://steamcommunity.com/profiles/76561199557479327

https://t.me/grizmons
Attributes
  • profile_id_v2

    4841d6b1839c4fa7c20ecc420b82b347

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 OPR/104.0.0.0

Targets

    • Target

      2460-551-0x0000000000400000-0x00000000005C0000-memory.dmp

    • Size

      1.8MB

    • MD5

      8ca5b94ea166a6db6f7ee9843a5d3a6c

    • SHA1

      7f1cd28f2551a5c57195a0dad1548e1659941383

    • SHA256

      2c0b0407c16b1b6e9385399d1ad26d81bc2382b3801e41670df616d97c5be7f8

    • SHA512

      9ba09ddec73c1a76055767b115ba879aeed320a542c63d77c7e559685d48f68dc8102baaa40be397acb4b53f6a1dc0286a5262f001c07edd5ea5bc86d4d233c3

    • SSDEEP

      6144:+A+1e4b30YI1zA7I4ucur1srMPOZcF9IRS/hxzc8XD3PlJy:QXbkSlNrmOZcF92StXDNJ

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks