General
- Target _034b06fb37c5613552aea6af542a5856668d22f4026f535496dcaf7e7b56c3e4.exe
- Size 2.3MB
- Sample260706-p2kmnabt2r
- SHA256 034b06fb37c5613552aea6af542a5856668d22f4026f535496dcaf7e7b56c3e4
- MD5 4d7c31510aa0084d9ebd7e465e7811a5
- SHA1 8f5a019bf88b5ede19f7aa6e954c1c3456b2f290
- SHA512 ff41cf2215c2b4f2af94abbd73d7cdecbd9d519e55426be89b26facd098906de66ed43dd37de804f0b5454a54fdd77378afb0a264b82763b82c6327b01700314
- SSDEEP 49152:d8P5MFXsDu0CfugIHL9qtqEXGFTpUjLsYmChOd:pmunUHPpqjLo
- TLSH T10BB5330EE86F8F5BCF33E7B44D3F1B8C956A29086B3009A3959B7138C4B57C495E9981
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
_034b06fb37c5613552aea6af542a5856668d22f4026f535496dcaf7e7b56c3e4.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
2.1
Botnet
-
8778bb78a64d4c74c3d1d849856a054e
C2
-
https://telegram.me/turb00m
-
https://steamcommunity.com/profiles/76561198689449626
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/147.0.0.0
Targets
-
- Target _034b06fb37c5613552aea6af542a5856668d22f4026f535496dcaf7e7b56c3e4.exe
- Size 2.3MB
- SHA256 034b06fb37c5613552aea6af542a5856668d22f4026f535496dcaf7e7b56c3e4
- MD5 4d7c31510aa0084d9ebd7e465e7811a5
- SHA1 8f5a019bf88b5ede19f7aa6e954c1c3456b2f290
- SHA512 ff41cf2215c2b4f2af94abbd73d7cdecbd9d519e55426be89b26facd098906de66ed43dd37de804f0b5454a54fdd77378afb0a264b82763b82c6327b01700314
- SSDEEP 49152:d8P5MFXsDu0CfugIHL9qtqEXGFTpUjLsYmChOd:pmunUHPpqjLo
- TLSH T10BB5330EE86F8F5BCF33E7B44D3F1B8C956A29086B3009A3959B7138C4B57C495E9981
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtSetInformationThreadHideFromDebugger