Overview

overview

10

Static

static

10

324756d4e8...09.exe

windows7-x64

10

324756d4e8...09.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    324756d4e8f8d6aa249d8ed96cfad0bf44c4686888b7e42ea6133b64371da109.exe

  • Size

    295KB

  • MD5

    6c99d8662afe58d078bda36a0ae1a452

  • SHA1

    9332f9455e6a2170ba22911c027374af425310bd

  • SHA256

    324756d4e8f8d6aa249d8ed96cfad0bf44c4686888b7e42ea6133b64371da109

  • SHA512

    03fc01694a12d98382cf74ddf06b4b1185638b3fedba7b5a385ff833e99039da1642fb8e0bdd8d3a3203aa283c48f208ce676709fb170f76a83dfe6558cdc321

  • SSDEEP

    6144:Ukjaba2rnQPW2I4YCKMQ0iaOVCZgm0yAjnt:U42rnQPW+60iaOVnmE

Score
10/10
1259vidar

Malware Config

Extracted

Family

vidar

Version

54.7

Botnet

1259

C2

https://t.me/trampapanam

https://nerdculture.de/@yoxhyp

http://5.161.21.185:80
Attributes
  • profile_id

    1259

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 324756d4e8f8d6aa249d8ed96cfad0bf44c4686888b7e42ea6133b64371da109.exe
    .exe windows:5 windows x86 arch:x86

    99fe2b0df0755e6c126dcb5172ad437d


    Headers

    Imports

    Sections