Overview

overview

10

Static

static

10

dridex

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6fb4a249e65fd7e0ff24323604b9bbc34324db76ec4978dcd193e1b23a5ac554

  • Size

    316KB

  • MD5

    51de33ffb264ed9871918a9176d5f5e9

  • SHA1

    df0ce148a698b380a4d74b9c1f8fc7a9dd70a864

  • SHA256

    6fb4a249e65fd7e0ff24323604b9bbc34324db76ec4978dcd193e1b23a5ac554

  • SHA512

    cd0a03f4fa99e5d35c9d1a2e0c73adbee730095263ff8d205437f89f39a655e922720823648380460367e7419cc1a36dc02bce3330c0e526af214d25249aa18b

  • SSDEEP

    6144:aUNdslLON1aPsi5chCRXmI4/LusZbXm+QRALNVJCnfhOqUZaBMYUB:axGwP/OWOxXm+4AdCn+oKxB

Score
10/10
af2b108237a470d5313ebab11ef5d055vidar

Malware Config

Extracted

Family

vidar

Version

6.1

Botnet

af2b108237a470d5313ebab11ef5d055

C2

https://steamcommunity.com/profiles/76561199563297648

https://t.me/twowheelfun
Attributes
  • profile_id_v2

    af2b108237a470d5313ebab11ef5d055

  • user_agent

    Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Mobile/15E148 Safari/605.1.15

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6fb4a249e65fd7e0ff24323604b9bbc34324db76ec4978dcd193e1b23a5ac554
    .exe windows:5 windows x86

    62d315482935db63b6502d6a5f04722d


    Headers

    Imports

    Sections