General
- Target cfd74fd692c449d31e99bfd59a3935b2811e3fbac2293788dbef11fe541ef137
- Size 174KB
- Sample240417-rmjsxsda3z
- SHA256 cfd74fd692c449d31e99bfd59a3935b2811e3fbac2293788dbef11fe541ef137
- MD5 bc9f3834a79c2af961d169960e5783c3
- SHA1 7e95a9be7724b833201ae02bc6292c9a726b1a22
- SHA512 46ac202a6c5520a99b2c134d0e0f6e617324717fdb826a8139199dd029e1c9e3c9aef8c0406b3c9b6f65455265ea86c32bf1e2834a147f713f5c9e77e55b6486
- SSDEEP 3072:NRPXFeYd2NA741aEXgmrgaAFcXfYyHTEhTTmJiT9TI61E2iBO:3d2N4EQzaAFcfWT/TI61j
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
872a0b080e271649b851c20da763176e91b82cd83b133771bc83f7a8d2b00f65.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
872a0b080e271649b851c20da763176e91b82cd83b133771bc83f7a8d2b00f65.exe
Resource
win10v2004-20240412-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
7.9
Botnet
-
64928583ce0228f6ec22bfb02c3b79a8
C2
-
https://t.me/hypergog
-
https://steamcommunity.com/profiles/76561199642171824
Attributes
-
profile_id_v2
64928583ce0228f6ec22bfb02c3b79a8
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
Targets
-
- Target 872a0b080e271649b851c20da763176e91b82cd83b133771bc83f7a8d2b00f65.exe
- Size 267KB
- SHA256 872a0b080e271649b851c20da763176e91b82cd83b133771bc83f7a8d2b00f65
- MD5 a45d852fe089cda3040623e5bbb3bff3
- SHA1 45264d33a9529a26058d38e90183db4f83bdd2cb
- SHA512 f2d3857f00085ac860171a29c457ecf3ece1709f14d58ef6862788eca8b4c19772cb3d1fe7054d9f84f54874b3298d00403d10460764df4bbe6bdd1d8de89954
- SSDEEP 3072:d0+s2mbG5ULHPGifydADcW5G8zvFkieMGvjVJfOzAzY0ioJDQS1XMiU5rCNXJ:KzNLH+ifXDcsG8pkXRvTNzrJDQoT/F
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect Vidar Stealer