General

  • Target

    e8f2c2865e89652d8c2807a66a407cf7fdb3d4697f69d3bd4e2ed4e7a3daf981

  • Size

    8.2MB

  • MD5

    008daa1fce5fb4c6c1290810e8b27bc2

  • SHA1

    5e649cab03bdf13fa89f5ae27da65a754f38f6e8

  • SHA256

    e8f2c2865e89652d8c2807a66a407cf7fdb3d4697f69d3bd4e2ed4e7a3daf981

  • SHA512

    70bed5e6c1b3790eb0905ee0cb445477ec7a6a1b54f1da5dda55fa74f9c3b0147cae6fe05f44ed48e1b8e112bf1c5af58d0efa0ea3a2f2189d9ed08b8a2a81a7

  • SSDEEP

    196608:oWZflgblwdrPq9hnj2/mB+kgNrZMRzoo0j0zZg4if7EvXW:FZtOGrSnq/iKtMRzooo0z6RQX

Malware Config

Extracted

Family

vidar

Version

2.8

Botnet

34cdf5c7f317a56f0833cab4e0418c85

C2

https://t.me/dionysus_tg

https://steamcommunity.com/profiles/76561199482248283

http://157.90.113.100:80

Attributes
  • profile_id_v2

    34cdf5c7f317a56f0833cab4e0418c85

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e8f2c2865e89652d8c2807a66a407cf7fdb3d4697f69d3bd4e2ed4e7a3daf981
    .exe windows:5 windows x86

    cbb4928b10112b2efdce633d9335e4b1


    Headers

    Imports

    Sections