General
- Target dec_css.bin
- Size 137KB
- Sample260403-yr8feadx2v
- SHA256 c33ad557bd31598bddecf9e9d57ec0d87f1c0ae768233861fe9b24250034149b
- MD5 468f02113e68f1f5e0d0159c6109d25d
- SHA1 ab0f9fde50d37fb1141a86847f22696f625b3c4d
- SHA512 fece67969a9a5c7d5b90ff2335b766bd31bd782fc83eb0aac7f6df5518185236b07f3cf8f5fde62f05edb5e0a8c451d0085f14282df7a29862333b1993efce96
- SSDEEP 3072:aVvH8RuVrLyEj/S2CUGACcceJd/klDHa/R8mxu3s8QI5u:KH8RuRLlzgUd6a/AslI5u
- TLSH T128D37C117282A0B1E8472B741E7F77BDEEB04E256B908ACBE3C47D598F1A1E52371C19
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
dec_css.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
dec_css.exe
Resource
win11-20260130-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
13.1
Botnet
-
ee4724586a69cda3db87344f07509f40
C2
-
https://t.me/l793oy
-
https://steamcommunity.com/profiles/76561199829660832
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0
Targets
-
- Target dec_css.bin
- Size 137KB
- SHA256 c33ad557bd31598bddecf9e9d57ec0d87f1c0ae768233861fe9b24250034149b
- MD5 468f02113e68f1f5e0d0159c6109d25d
- SHA1 ab0f9fde50d37fb1141a86847f22696f625b3c4d
- SHA512 fece67969a9a5c7d5b90ff2335b766bd31bd782fc83eb0aac7f6df5518185236b07f3cf8f5fde62f05edb5e0a8c451d0085f14282df7a29862333b1993efce96
- SSDEEP 3072:aVvH8RuVrLyEj/S2CUGACcceJd/klDHa/R8mxu3s8QI5u:KH8RuRLlzgUd6a/AslI5u
- TLSH T128D37C117282A0B1E8472B741E7F77BDEEB04E256B908ACBE3C47D598F1A1E52371C19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10