Overview

overview

10

Static

static

10

b6cc2b22f4...1N.exe

windows7-x64

3

b6cc2b22f4...1N.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6cc2b22f4c4d28c0f9052d8b871e692c7d2ee6b36a766b652482cf338d47051N

  • Size

    337KB

  • MD5

    824c06eb6e3598effc133fac936747c0

  • SHA1

    cbdf5d3db180e6ce8693ed2bafd899737ac226bf

  • SHA256

    b6cc2b22f4c4d28c0f9052d8b871e692c7d2ee6b36a766b652482cf338d47051

  • SHA512

    07aed92ee0e0d28bea4b450f2c641ef8b89e95e8daf14ef3365190ebc039b73f264a476b57d4e764ac0c1da7aea69040ab75dbaa1abc36c78cc84e92b7cf5596

  • SSDEEP

    6144:skeehzAsTLPXhmXtI88Ndrb8R2edHdeNonXYJ6gjuhkv:skeehT7hpzg4C9eNon8j

Score
10/10
371995683280220a00f84dafb17a9c7cvidar

Malware Config

Extracted

Family

vidar

Version

4.4

Botnet

371995683280220a00f84dafb17a9c7c

C2

https://steamcommunity.com/profiles/76561199235044780

https://t.me/headlist
Attributes
  • profile_id_v2

    371995683280220a00f84dafb17a9c7c

  • user_agent

    Mozilla/5.0 (Linux; Android 7.0; Pixel C Build/NRD91D; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/53.0.2785.124 Safari/537.36

Signatures

  • Vidar family
    vidar
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b6cc2b22f4c4d28c0f9052d8b871e692c7d2ee6b36a766b652482cf338d47051N
    .exe windows:5 windows x86 arch:x86

    2deb0170673a67617f054deaf02df626


    Headers

    Imports

    Sections