Overview

overview

10

Static

static

10

6f8be3c811...8c.exe

windows7-x64

3

6f8be3c811...8c.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f8be3c8110ca47ad433db1577f991f833bdf96228d23a8391b41b3ba6d1458c

  • Size

    368KB

  • Sample

    240524-v78vbsde9w

  • MD5

    b3546f7a820791147e38a8e29ebd6a68

  • SHA1

    5957bde110841e731ad81d1e8899180f459af8a8

  • SHA256

    6f8be3c8110ca47ad433db1577f991f833bdf96228d23a8391b41b3ba6d1458c

  • SHA512

    18723b1b86d87fb23fce8a9fbe196d18072c423215e5f8702171f99c41875ad676d73982f7a68e11f06b563da8d012133e9d32b18a8b17d5b62475b5ab28a354

  • SSDEEP

    6144:W4+YAzt60iv4OY6V96+muFr2ejshqo/RQ8HB539j6lHYVfP6yA0pD/a7a2fhDV9D:W4+YAztviv4OY6V96+mu5jshqo/RQ8hK

Score
10/10
vidar897

Malware Config

Extracted

Family

vidar

Version

2.4

Botnet

897

C2

https://t.me/gurutist

https://steamcommunity.com/profiles/76561199476091435

http://95.216.164.28:80
Attributes
  • profile_id

    897

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

Targets

    • Target

      6f8be3c8110ca47ad433db1577f991f833bdf96228d23a8391b41b3ba6d1458c

    • Size

      368KB

    • MD5

      b3546f7a820791147e38a8e29ebd6a68

    • SHA1

      5957bde110841e731ad81d1e8899180f459af8a8

    • SHA256

      6f8be3c8110ca47ad433db1577f991f833bdf96228d23a8391b41b3ba6d1458c

    • SHA512

      18723b1b86d87fb23fce8a9fbe196d18072c423215e5f8702171f99c41875ad676d73982f7a68e11f06b563da8d012133e9d32b18a8b17d5b62475b5ab28a354

    • SSDEEP

      6144:W4+YAzt60iv4OY6V96+muFr2ejshqo/RQ8HB539j6lHYVfP6yA0pD/a7a2fhDV9D:W4+YAztviv4OY6V96+mu5jshqo/RQ8hK

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks