General
- Target 2d2020ba2c8ec470a5c3424f16012a3b26b4286469fe042177574cc7e22952db
- Size 176KB
- Sample240417-rjrdlabd25
- SHA256 2d2020ba2c8ec470a5c3424f16012a3b26b4286469fe042177574cc7e22952db
- MD5 cb1bfb236d47bea851ce5eda7968cebb
- SHA1 16705706158047ab52a65ceca022185c63754918
- SHA512 ee502f696f9716c23d3cd7f590ebe28a056d892b5d0ddb519dc6c1b59dc3ce6a8214fb319ffe7816a1304121215c8099de4898f3aad543faa528731c6eb85c0b
- SSDEEP 3072:q0Hh/BZ1+oQrJ2ghp2i0+6bfbdXin+avcewt06JSzLFEfwCIqh:q0/ZK2gnN0i+Hewt9OLFEfwCIS
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aec37f0045fb7091d04f8eedd38d171debaec8225d344a8050cea1c31b435e74.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
aec37f0045fb7091d04f8eedd38d171debaec8225d344a8050cea1c31b435e74.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
8
Botnet
-
b8a5ebfe4a0abceff8d2cd1a6c6c4024
C2
-
https://steamcommunity.com/profiles/76561199644883218
-
https://t.me/neoschats
Attributes
-
profile_id_v2
b8a5ebfe4a0abceff8d2cd1a6c6c4024
-
user_agent
Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78
Targets
-
- Target aec37f0045fb7091d04f8eedd38d171debaec8225d344a8050cea1c31b435e74.exe
- Size 240KB
- SHA256 aec37f0045fb7091d04f8eedd38d171debaec8225d344a8050cea1c31b435e74
- MD5 4fe446a6392bb4473a45ff037592d52c
- SHA1 ca815e429534931c4c189c2c91a81fb1d6df1cc5
- SHA512 4780e1948f13e258ff9610b08c1f84caaf659fdb3bba7925d9447c20fbf3f1fde9fc24d6fd616003d8be349a2bfe3a845074ec1206efe764aef925c0c2547db4
- SSDEEP 3072:z0/Jk9z3DmaXLVODmGP+Xrn6dThsLNkeBaxRuiluCxh3t35waZVTGh:wxmz3KaXC2Xr6dWLPoRNH3TlG
- MD5 SHA1 SHA512 SSDEEP
Score10/10Detect Vidar Stealer