General

  • Target

    15539f1153108d236a9399b2c1ccf092e46c1056c9c664de337df8f7bdbd75c8N

  • Size

    367KB

  • MD5

    35248832330a09b1ac56a58e19b22ea0

  • SHA1

    90191e3df9f63fbe60dcf7ab3aace7cc8ccf8855

  • SHA256

    15539f1153108d236a9399b2c1ccf092e46c1056c9c664de337df8f7bdbd75c8

  • SHA512

    4d629a317b74d356e509f99fd73bd54b2834d57bc75fe05e10093dab908d606b174f4da58a0507dc40f781e89b6f7d65800969726ddd4e06376d50c49069110f

  • SSDEEP

    6144:EbbD2RXh9KD7EvVkr0evEcZ7/CUqjfgQlVumr0VRXL0chXfojcW:EbuRX6D7ENiKUqDgYumrURXL0XN

Malware Config

Extracted

Family

vidar

Version

3.6

Botnet

78489afd9d9a4747beb445e5fb5b9c96

C2

https://steamcommunity.com/profiles/76561199499188534

https://t.me/nutalse

Attributes
  • profile_id_v2

    78489afd9d9a4747beb445e5fb5b9c96

  • user_agent

    Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 15539f1153108d236a9399b2c1ccf092e46c1056c9c664de337df8f7bdbd75c8N
    .exe windows:5 windows x86 arch:x86

    8d40e0ab252b03f9f78f6902c4f1940e


    Headers

    Imports

    Sections