General
- Target Vidar - 05.12.2022.zip
- Size 324KB
- Sample260601-bdws5ac16l
- SHA256 a1549eabd410f179feb82c288c87b7877cdb925ac15c10b843589e4e4074ff9e
- MD5 d2078a778e3c07edd8510732dc882485
- SHA1 6c21d8c2bf0ced0b0fc1d8899e36cf674c2fc871
- SHA512 bff856a9c4763f5dc2a8cf90523822d3f7dda1a0d4cd178fb04d01b645fc4d31e9af4880db22ef541681f488c700044bd18d3c09fb86c465e625ae0866c5dd4e
- SSDEEP 6144:loIWWwhGxeMcgTn8QK0sfLhBbwcgrCg2nMWPKmiCySfT9yeM2LR5WHshkNYYRWGt:MWw4xrHazhpwzWSCycT8eMaRkHshkKXE
- TLSH T1D06423C66E92B8F80448B8F6F95A8DD0CC9140A7D9D155346589F83E8ECA43EF23D1E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Setup.exe
Resource
ubuntu2204-amd64-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Setup.exe
Resource
debian9-armhf-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Setup.exe
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Setup.exe
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
56
Botnet
-
1702
C2
-
https://t.me/asifrazatg
-
https://steamcommunity.com/profiles/76561199439929669
-
http://116.202.6.206:80
Attributes
-
profile_id
1702
Targets
-
- Target Setup.exe
- Size 481KB
- SHA256 8cff070a61e966da876a22d0442e0ad007424b10ba9b7af91541dc3516679c50
- MD5 96d5b9003eeee689e0e92d66d700cbc8
- SHA1 25306aa64b79a7b75e12a4b099bb3ed4569493da
- SHA512 112bdc43f9a902d95797bd1aba2c9fc1bd3b5e7604e27fbccf0b8ea5d4539556ddeb7c09c7094ae730281c8f0f040658a44f1778a8126d2db50c9c976fe99d31
- SSDEEP 12288:2PPniLIJy2nozeeepd6mobUq/ZmiBVBkKb:4PiOy2nozJeTCU+Z
- TLSH T1B8A4AC7DE4A38455D00C8DF6826427EEEEBCDB48622E5CA6FCF0397DE03A1C6542AD15
- MD5 SHA1 SHA512 SSDEEP TLSH