General
- Target 0362b447dd6e8df50be93ba45736a4f190003e5897023ea4659d77c9c43ed2b9
- Size 177KB
- Sample240417-rmwsgsda5w
- SHA256 0362b447dd6e8df50be93ba45736a4f190003e5897023ea4659d77c9c43ed2b9
- MD5 cfa17bd2b107da42479930d48be785e0
- SHA1 3ee14a508c0a7269794c8ddf58cb038c110884c4
- SHA512 98d2d7312abee1f6ecee0ec89d668281e925248082c7f8eb414cc6fccc5cfc0f1c20fde7e1c8eb4039651110442062a17a1d69c77bd65776cbfafe7263701389
- SSDEEP 3072:3+QvRikO5083wzJ766BbKSFyr5lgtgNK606wjgQxAtHsv9CS:35ikO57wzJ766du5Gnl9jRSMvwS
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d966656c7e2e3204b741f7d6fec9a89dad3464bae4113ae2d95a6a27715cf2d7.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d966656c7e2e3204b741f7d6fec9a89dad3464bae4113ae2d95a6a27715cf2d7.exe
Resource
win10v2004-20240412-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
7.9
Botnet
-
64928583ce0228f6ec22bfb02c3b79a8
C2
-
https://t.me/hypergog
-
https://steamcommunity.com/profiles/76561199642171824
Attributes
-
profile_id_v2
64928583ce0228f6ec22bfb02c3b79a8
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
Targets
-
- Target d966656c7e2e3204b741f7d6fec9a89dad3464bae4113ae2d95a6a27715cf2d7.exe
- Size 277KB
- SHA256 d966656c7e2e3204b741f7d6fec9a89dad3464bae4113ae2d95a6a27715cf2d7
- MD5 25c7e93e2514dd79fb92844f9d326e4e
- SHA1 46d1adeda3a64db4613bc3c4a0da303da20bb37c
- SHA512 258a151ab586586801304ca10ed02a4428b6243fc7c79ab7b480d44e4ba621be699c6078a36c1c2d6da542e9f40adf986709acb497ef47cc606e3833c11422ee
- SSDEEP 3072:8vFVmnKbFZp4neMxbCGtP0NaJaUU7MZ2hgvfwYeb/07GXqSxc5qvPXMiv5snLTtK:89V9Zuney2Gt90BdTbwkxTXqnLTS
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect Vidar Stealer