Overview

overview

10

Static

static

10

2edc8c6520...1b.exe

windows7-x64

1

2edc8c6520...1b.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2edc8c65202a68d10cb4d775ba91ed1b.exe

  • Size

    315KB

  • MD5

    2edc8c65202a68d10cb4d775ba91ed1b

  • SHA1

    5cee7ed20e4d49778c8a7ec88f9b24c395fd7f97

  • SHA256

    e0f76fec46d5a367fdec67bfef123cb3ab7c6d7edf2efd14ba4c9b635dc6e34b

  • SHA512

    fb0f7ba8de458ab936bacdb5c645dadcbc3abaeb42aac5148660e92e1b22bd563ec15efa45f71fd19330ad118353a96bbc0f8a71b6e0bbacec9fbe42c4bc18a0

  • SSDEEP

    6144:aLhLW8KrV1R/2XJtCTHI41wuBdqv2UxgueIseSq7Lmh+br:4horV1p2XQZMv2UxgueIsG7L

Score
10/10
1dab505a37b1d9f441e6205dfb0c427avidar

Malware Config

Extracted

Family

vidar

Version

5.6

Botnet

1dab505a37b1d9f441e6205dfb0c427a

C2

https://steamcommunity.com/profiles/76561199550790047

https://t.me/bonoboaz
Attributes
  • profile_id_v2

    1dab505a37b1d9f441e6205dfb0c427a

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 OPR/103.0.0.0

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2edc8c65202a68d10cb4d775ba91ed1b.exe
    .exe windows:5 windows x86

    f2222f0f215a06acc111aee4e181dfd8


    Headers

    Imports

    Sections