General
- Target e91343673b49141dd456a5473c0929cae745ca6b9ad309cb7654289e02d53efe
- Size 176KB
- Sample240417-rlqvvabe25
- SHA256 e91343673b49141dd456a5473c0929cae745ca6b9ad309cb7654289e02d53efe
- MD5 781e7ee4373133b8f0e54017b70af4ab
- SHA1 f05393bca28862e2264bdb41226e0d1d89c6f1d3
- SHA512 5493dfef0bf2eec48a6d41cf6e7b4cba7ab146cacaf5af6f7c0fb6611ecc06daadd3030026f9699b35e0ccb20bf5f831bd930b54175be759e3917205c40282e5
- SSDEEP 3072:NnYkBbBHa6mzIlTbiRF2KRSRnA2KV9eAWZZDqMRgdp6l+8:VPNHaFzGtKRa+V4VmMeO88
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
81325d0c1a73cad7402d2020c15304cba466ecc7919061cd16762f655019c038.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
81325d0c1a73cad7402d2020c15304cba466ecc7919061cd16762f655019c038.exe
Resource
win10v2004-20240412-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
8
Botnet
-
b8a5ebfe4a0abceff8d2cd1a6c6c4024
C2
-
https://steamcommunity.com/profiles/76561199644883218
-
https://t.me/neoschats
Attributes
-
profile_id_v2
b8a5ebfe4a0abceff8d2cd1a6c6c4024
-
user_agent
Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78
Targets
-
- Target 81325d0c1a73cad7402d2020c15304cba466ecc7919061cd16762f655019c038.exe
- Size 240KB
- SHA256 81325d0c1a73cad7402d2020c15304cba466ecc7919061cd16762f655019c038
- MD5 2c816bef3cd7f3f367e6b94761c2bab2
- SHA1 791c10407dd5df2abee9b87afa09306bd5d7d93c
- SHA512 e35ae3ff851fa53af16f5e4fc93aef20917d4b4f83d74bed74b972a207a1f7c83b97c8027820d8add586ee7a0b1594eb436d75fb2db657cc54c73fbfad10f9ad
- SSDEEP 6144:FA3Qqn4PxoQMZIlkEPTodF8vtH5ofRaG:FaQqG6lgkWM/StH5ofR
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect Vidar Stealer