General
- Target Boostrastrapper.exe
- Size 2.2MB
- Sample260319-qa283aaz3p
- SHA256 16eb83928b3e7c726666ea622cd750d0c1e0af39f236e2db045f7642c85e2d27
- MD5 3728639b8dc680461bd878824bb96efa
- SHA1 5846869e00fb0983eda2fb311e475f0a18f59d32
- SHA512 cf52242c5b369cfb25864b495065dd088366bbfd01a999298fa1ede43760b8bdb39bc8f783fbe266aa0adcbb6ebbedcac3cb2449b03f2b1af50572db282e94b1
- SSDEEP 49152:H16SEsDHtKqhqK6zFJNvKOrIUGv1vsmytTgZ:H1OyITJrIUQsmyGZ
- TLSH T113A57B0ABDD418E6D06E97728DB762927B71BC190B3223D71EA0757C2E727E0ADB4704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Boostrastrapper.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Boostrastrapper.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
18.5
Botnet
-
76c4b25a7f5dc8a0783231303f2b380d
C2
-
https://96.126.176.24
-
https://telegram.me/mm8hyx
-
https://steamcommunity.com/profiles/76561198728266687
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0
Targets
-
- Target Boostrastrapper.exe
- Size 2.2MB
- SHA256 16eb83928b3e7c726666ea622cd750d0c1e0af39f236e2db045f7642c85e2d27
- MD5 3728639b8dc680461bd878824bb96efa
- SHA1 5846869e00fb0983eda2fb311e475f0a18f59d32
- SHA512 cf52242c5b369cfb25864b495065dd088366bbfd01a999298fa1ede43760b8bdb39bc8f783fbe266aa0adcbb6ebbedcac3cb2449b03f2b1af50572db282e94b1
- SSDEEP 49152:H16SEsDHtKqhqK6zFJNvKOrIUGv1vsmytTgZ:H1OyITJrIUQsmyGZ
- TLSH T113A57B0ABDD418E6D06E97728DB762927B71BC190B3223D71EA0757C2E727E0ADB4704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Vidar Stealer
-
Vidar family