General

  • Target

    build.exe

  • Size

    316KB

  • MD5

    8aa5f0e927ffd98dd426aade722184ec

  • SHA1

    cb2d927e48cbe739dbe4c0f103a31dfd854002d9

  • SHA256

    c0c0bf8e1b66ef64300f2a04b5fbcad1e68a6be7a7711b2276f661cbb8dcd31f

  • SHA512

    da99e9db038720e963894ec82def0c951058c0cfa872c261903078e6e15e2f0b22e69b30af45fa654697aaaa079f5556553c60d8226c21be194bef33f6a0de3f

  • SSDEEP

    6144:Rbe2Qqw3tylpe5pXj1ISI4kWuY7v3BdhZFhJaPR/zhFyjU:O9y7e7myT37hZFh2R/

Malware Config

Extracted

Family

vidar

Version

6

Botnet

5a1fadccb27cfce506dba962fc85426d

C2

https://steamcommunity.com/profiles/76561199560322242

https://t.me/cahalgo

Attributes
  • profile_id_v2

    5a1fadccb27cfce506dba962fc85426d

  • user_agent

    Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 uacq

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:5 windows x86

    0be9c17f6fccffc42ecb26f7d68bcf0b


    Headers

    Imports

    Sections