General
- Target Lauucher-PC_S0FTv2O24.rar
- Size 123.0MB
- Sample240228-ptv4esbf76
- SHA256 c8c67f470f9d85d2e4e2ec44ed3c7bbfbdbd5b4fde5e189dede3879a984681a7
- MD5 bd941338e924c4ddfade115320e65da2
- SHA1 bce2e5d79c209d20e8dc180c500852c3dd6e5aad
- SHA512 fd860790b6178d5d1fc731aa49b2d00623dfb23383fe2fcc0e3b99c7d94bab7fa93b7123e5484e25da109030f7a36f0436489b0c9e870b43e4169c2fe16c5e04
- SSDEEP 3145728:pg2QK0rjaiNEWUXO2VVU2azXEfn8PL7oHS5NEW8e8m2Th:+BCiNvsZnaAUPL7oYNEtmMh
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Lauucher-PC_S0FTv2O24.rar
Resource
win10-20240221-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
7.8
Botnet
-
97b92d10859a319d8736cd53ff3f8868
C2
-
http://5.252.118.12:80
-
https://t.me/voolkisms
-
https://t.me/karl3on
-
https://steamcommunity.com/profiles/76561199637071579
Attributes
-
profile_id_v2
97b92d10859a319d8736cd53ff3f8868
-
user_agent
Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9
Targets
-
- Target Lauucher-PC_S0FTv2O24.rar
- Size 123.0MB
- SHA256 c8c67f470f9d85d2e4e2ec44ed3c7bbfbdbd5b4fde5e189dede3879a984681a7
- MD5 bd941338e924c4ddfade115320e65da2
- SHA1 bce2e5d79c209d20e8dc180c500852c3dd6e5aad
- SHA512 fd860790b6178d5d1fc731aa49b2d00623dfb23383fe2fcc0e3b99c7d94bab7fa93b7123e5484e25da109030f7a36f0436489b0c9e870b43e4169c2fe16c5e04
- SSDEEP 3145728:pg2QK0rjaiNEWUXO2VVU2azXEfn8PL7oHS5NEW8e8m2Th:+BCiNvsZnaAUPL7oYNEtmMh
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect Vidar Stealer
-
Executes dropped EXE