General
- Target 3c3f12531045b7eedfe25e0f291d4792b0d8c8366f8de043e2fa8ecf34ccb913.exe
- Size 2.3MB
- Sample260720-jj34dsav2l
- SHA256 3c3f12531045b7eedfe25e0f291d4792b0d8c8366f8de043e2fa8ecf34ccb913
- MD5 84b7baaa2e134146258d883388114f18
- SHA1 91f2324c19f08256d45bfc675a80efd6ad1e8748
- SHA512 5b5097a82f03d31fc9de76f8ce85c52ccf4d4c6466241c8bdb9011bd4d7126ccce58495a86ee002c6aa9d304df4662a20404f0d7f669f74046ac548efc1e9427
- SSDEEP 49152:wuGIVgBM64FTkw5Y/XeWbqRRpxqJIW+mpOSOOR2:wpywJITmpBd2
- TLSH T15DB57B523C9104BDC0A9B73248F27692BA35F8190B3627D32F95AA782F37BD01D76356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3c3f12531045b7eedfe25e0f291d4792b0d8c8366f8de043e2fa8ecf34ccb913.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3c3f12531045b7eedfe25e0f291d4792b0d8c8366f8de043e2fa8ecf34ccb913.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
1.3
Botnet
-
7ccb4beeb7a8aae1972f52986f4611ec
C2
-
https://telegram.me/ci0iiif
-
https://steamcommunity.com/profiles/76561198714231957
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:140.0) Gecko/20100101 Firefox/140.0
Targets
-
- Target 3c3f12531045b7eedfe25e0f291d4792b0d8c8366f8de043e2fa8ecf34ccb913.exe
- Size 2.3MB
- SHA256 3c3f12531045b7eedfe25e0f291d4792b0d8c8366f8de043e2fa8ecf34ccb913
- MD5 84b7baaa2e134146258d883388114f18
- SHA1 91f2324c19f08256d45bfc675a80efd6ad1e8748
- SHA512 5b5097a82f03d31fc9de76f8ce85c52ccf4d4c6466241c8bdb9011bd4d7126ccce58495a86ee002c6aa9d304df4662a20404f0d7f669f74046ac548efc1e9427
- SSDEEP 49152:wuGIVgBM64FTkw5Y/XeWbqRRpxqJIW+mpOSOOR2:wpywJITmpBd2
- TLSH T15DB57B523C9104BDC0A9B73248F27692BA35F8190B3627D32F95AA782F37BD01D76356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Vidar Stealer