General

  • Target

    7450bdd0ca869adaacb648e3a6bf2fef1b33759175527a91f622e9efdad6f2ae

  • Size

    315KB

  • MD5

    99ae3f5a6c0097486252cfbbe8004fe8

  • SHA1

    9ff51813e67ddb4e71a7bfe08ba4811c0f5e9ef8

  • SHA256

    7450bdd0ca869adaacb648e3a6bf2fef1b33759175527a91f622e9efdad6f2ae

  • SHA512

    5ccd02e1a54cbba58baad796b206ec8c79b929e7bb9ddbb7d4c320f0f44a1cc11ef12366dc564d3c07f30905573180804a0f2d627b825a87e59189b3da8548a3

  • SSDEEP

    6144:YG4ClwEG5C4qSMaMnI4XquiyqPCGZ/SOISBPchYJLAK5AXDXIp:LG5CvN50CGZ/SOVV1JLAPXDq

Malware Config

Extracted

Family

vidar

Version

5.8

Botnet

ed6185967347c4ed26e5ec461beb8f92

C2

https://steamcommunity.com/profiles/76561199555780195

https://t.me/solonichat

Attributes
  • profile_id_v2

    ed6185967347c4ed26e5ec461beb8f92

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.0.0 Safari/537.36

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7450bdd0ca869adaacb648e3a6bf2fef1b33759175527a91f622e9efdad6f2ae
    .exe windows:5 windows x86

    dff4f4117a206f494f7c5c51361d1ecb


    Headers

    Imports

    Sections