Overview

overview

10

Static

static

10

208-770-0x...ry.exe

windows7-x64

1

208-770-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    208-770-0x0000000000400000-0x00000000006EA000-memory.dmp

  • Size

    2.9MB

  • Sample

    240306-yfyrtsha9t

  • MD5

    6de000088153212ea733b9ef66eb39c8

  • SHA1

    b08c7cfc6e3e5a92155a8c650635ff930903db94

  • SHA256

    6fcf06b9882f139b0264b4c2b8b9497e07db13f4e4b247d51c9b95f487610d6f

  • SHA512

    a3944ec7a208e579458cb5f482fee23db44fd9347ac99138058e72eade1a180a4082ec80b74020a5a6c245c9141849be21472bdfe8f06d01d56a079f5309669b

  • SSDEEP

    6144:7ua5z4XeLqMVc2Uc1ax/QfTyuAlHKdlJt0KQah6wu2Ain1vFA:7V5z4XPMPA/QryvodlJt0KQT6FA

Score
10/10
vidare5d7cb6205191dc1a4f6288000860943

Malware Config

Extracted

Family

vidar

Version

3.8

Botnet

e5d7cb6205191dc1a4f6288000860943

C2

https://steamcommunity.com/profiles/76561198272578552

https://t.me/libpcre
Attributes
  • profile_id_v2

    e5d7cb6205191dc1a4f6288000860943

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7

Targets

    • Target

      208-770-0x0000000000400000-0x00000000006EA000-memory.dmp

    • Size

      2.9MB

    • MD5

      6de000088153212ea733b9ef66eb39c8

    • SHA1

      b08c7cfc6e3e5a92155a8c650635ff930903db94

    • SHA256

      6fcf06b9882f139b0264b4c2b8b9497e07db13f4e4b247d51c9b95f487610d6f

    • SHA512

      a3944ec7a208e579458cb5f482fee23db44fd9347ac99138058e72eade1a180a4082ec80b74020a5a6c245c9141849be21472bdfe8f06d01d56a079f5309669b

    • SSDEEP

      6144:7ua5z4XeLqMVc2Uc1ax/QfTyuAlHKdlJt0KQah6wu2Ain1vFA:7V5z4XPMPA/QryvodlJt0KQT6FA

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks