General
- Target d9839c6706bfa77748a6ecc32ed60c0412015fe554e74c99b8724545230521ed
- Size 146KB
- Sample240417-rnp2bsda9s
- SHA256 d9839c6706bfa77748a6ecc32ed60c0412015fe554e74c99b8724545230521ed
- MD5 0e8b86b921a086e75063dc8d71ba00ab
- SHA1 62c4ef97ad5adf9240ccb6933c12cdcf4e9c1cea
- SHA512 4cf939c3cfb790ba26ff6ef6f697809b9bef628cd835ba66b4922c268cba08ce18cfb3579d3c1f5935e13fa543ca703bfa894c148f6f3bfc6303cbb5bb11854b
- SSDEEP 3072:dC5ot37yc5VeMKwM7K9qMXhAcKil6Is+UHd5W2fIa:dC5o9X+bwV9qMdD2+w7
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6c06f528548ea45c6080a37373ce9051592998b0943ddea3e41f020be225d6af.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6c06f528548ea45c6080a37373ce9051592998b0943ddea3e41f020be225d6af.exe
Resource
win10v2004-20240412-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
7.9
Botnet
-
c5f794e270b6d4f6ecc574f1d15043f0
C2
-
https://t.me/hypergog
-
https://steamcommunity.com/profiles/76561199642171824
Attributes
-
profile_id_v2
c5f794e270b6d4f6ecc574f1d15043f0
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
Targets
-
- Target 6c06f528548ea45c6080a37373ce9051592998b0943ddea3e41f020be225d6af.exe
- Size 191KB
- SHA256 6c06f528548ea45c6080a37373ce9051592998b0943ddea3e41f020be225d6af
- MD5 2117899a2ae435139133075f560e2ae2
- SHA1 17e212a4d9e9029cd65493ce4512df152f0f52da
- SHA512 7252bbad94df230a8a761a93d16cfadbe5ffe5c15b6bf0abefe86161b11458f729aa01eb94fec6ee6f28ea2e3032f573286ead7748e4f4640c9dd1938c158ff5
- SSDEEP 3072:6bZw2/yYRNBsWfWJRsmRQLeGT3AN0VFlelDq8m3jMGnet4T25EyuBreJqyVbeN34:6NPyYHBsC0nQL3T3K0JelDqxnndJiUyI
- MD5 SHA1 SHA512 SSDEEP
Score10/10Detect Vidar Stealer