Overview

overview

10

Static

static

10

888-56-0x0...ry.exe

windows7-x64

3

888-56-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    888-56-0x0000000000400000-0x0000000000470000-memory.dmp

  • Size

    448KB

  • Sample

    240303-jtzhysga85

  • MD5

    e82295ee54308fda804fbaa1a3ff3853

  • SHA1

    b206419f1bbc9e48fccda2c5c07ba8d2dad3a97e

  • SHA256

    dd4cbcca44421542e65f0674019a0abaf35378c1b3c111c28c3d595233d16fd9

  • SHA512

    e83f9b0082413907c11be9d90d46095e1c7b4761cfc4ebb955153042718bbf63430b122fe2b7f5b7e70b19fa4339598537c634ee4ed11b2361136e20328d642e

  • SSDEEP

    6144:azzaqIwIt6Hsne0QwNHoA5Werfqtc1D64PWW8zdLS/67UVIj6+:rwIty1wB550c1D64P+VS/6u

Score
10/10
vidar408

Malware Config

Extracted

Family

vidar

Version

2.6

Botnet

408

C2

https://t.me/robertotalks

https://steamcommunity.com/profiles/76561199480821604

http://95.217.157.160:80
Attributes
  • profile_id

    408

  • user_agent

    Mozilla/5.0 (X11; CrOS x86_64 14685.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.4992.0 Safari/537.36

Targets

    • Target

      888-56-0x0000000000400000-0x0000000000470000-memory.dmp

    • Size

      448KB

    • MD5

      e82295ee54308fda804fbaa1a3ff3853

    • SHA1

      b206419f1bbc9e48fccda2c5c07ba8d2dad3a97e

    • SHA256

      dd4cbcca44421542e65f0674019a0abaf35378c1b3c111c28c3d595233d16fd9

    • SHA512

      e83f9b0082413907c11be9d90d46095e1c7b4761cfc4ebb955153042718bbf63430b122fe2b7f5b7e70b19fa4339598537c634ee4ed11b2361136e20328d642e

    • SSDEEP

      6144:azzaqIwIt6Hsne0QwNHoA5Werfqtc1D64PWW8zdLS/67UVIj6+:rwIty1wB550c1D64P+VS/6u

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks