Overview

overview

10

Static

static

10

872-809-0x...ry.exe

windows7-x64

3

872-809-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    872-809-0x0000000000400000-0x00000000007E4000-memory.dmp

  • Size

    3.9MB

  • Sample

    231111-y7wrjscb59

  • MD5

    a6a8109844be8fd35eaecc944de25b8d

  • SHA1

    3443fa8a6b16c81f42e5956baca1ac050c9f7045

  • SHA256

    ff0976c25d9a24871734a1317beb18e3c3dbd88e7061a04e82747c829db57b29

  • SHA512

    f460d8f40f22336a5177ab0003db9197d66ac8e185cac3a90f034b3a6a5476e1761971e2b2f176e3d9142b27f1cc0ccb04faaa1d5d8c11f23477fffc99e0cdc1

  • SSDEEP

    6144:qZ4ZJ7oMzXpdF2AX2RvzI4TJu1lnTZc4Gl1HOh2PIxbnOzq:qa8wpCRv9MnTZc4Gl1HLCbO

Score
10/10
vidar8036442451e00fa27a235c4a80cbfb3c

Malware Config

Extracted

Family

vidar

Version

6.3

Botnet

8036442451e00fa27a235c4a80cbfb3c

C2

https://steamcommunity.com/profiles/76561199566884947

https://t.me/octobrains
Attributes
  • profile_id_v2

    8036442451e00fa27a235c4a80cbfb3c

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:110.0) Gecko/20100101 Firefox/119.0

Targets

    • Target

      872-809-0x0000000000400000-0x00000000007E4000-memory.dmp

    • Size

      3.9MB

    • MD5

      a6a8109844be8fd35eaecc944de25b8d

    • SHA1

      3443fa8a6b16c81f42e5956baca1ac050c9f7045

    • SHA256

      ff0976c25d9a24871734a1317beb18e3c3dbd88e7061a04e82747c829db57b29

    • SHA512

      f460d8f40f22336a5177ab0003db9197d66ac8e185cac3a90f034b3a6a5476e1761971e2b2f176e3d9142b27f1cc0ccb04faaa1d5d8c11f23477fffc99e0cdc1

    • SSDEEP

      6144:qZ4ZJ7oMzXpdF2AX2RvzI4TJu1lnTZc4Gl1HOh2PIxbnOzq:qa8wpCRv9MnTZc4Gl1HLCbO

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks