Overview

overview

10

Static

static

10

047b4a9100...b7.exe

windows7-x64

3

047b4a9100...b7.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    047b4a9100e4be6d787fb8ade92dbd2f489fb2b84b4c84c8b0493c03d5919cb7

  • Size

    337KB

  • MD5

    6bf4096f7bada9107b0d60070d67b8a8

  • SHA1

    d60e6fc971b95ea87c97994ffad7b34561638622

  • SHA256

    047b4a9100e4be6d787fb8ade92dbd2f489fb2b84b4c84c8b0493c03d5919cb7

  • SHA512

    253096a7e4550c3be35a13ca9069581b3e1f67250cf25dd2f78862bc2dc514552dc0fcafcd70e6c69150c3c44f696c4d7f5a94cb2c8c80388ec52a3ac6128475

  • SSDEEP

    6144:7tvmJgFrko8B4/xw8ksPSGbEgajKliSmRHSMhCENbdz/:7tvmJapksPS4ELIiSiSKNbdz/

Score
10/10
a247b760bbf343752090be1436805458vidar

Malware Config

Extracted

Family

vidar

Version

4.1

Botnet

a247b760bbf343752090be1436805458

C2

https://t.me/task4manager

http://23.88.46.113:80

https://steamcommunity.com/profiles/76561199510444991
Attributes
  • profile_id_v2

    a247b760bbf343752090be1436805458

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 Edg/112.0.1722.34

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 047b4a9100e4be6d787fb8ade92dbd2f489fb2b84b4c84c8b0493c03d5919cb7
    .exe windows:5 windows x86 arch:x86

    1c84813089033efc0f55654edba31e01


    Headers

    Imports

    Sections