General
- Target 2026-07-22_cd4131422f6f11791e117c428c626c2f_cobalt-strike
- Size 8.8MB
- Sample260722-29a5eawgkf
- SHA256 4038fbf19ac8df613c3d54b286431725c7578b3bdbb564db8004521c948e14ff
- MD5 cd4131422f6f11791e117c428c626c2f
- SHA1 d65f66b89be661921420ace96626f4f450c8a41a
- SHA512 62c76a78b2b46d6c240a0733589c3c1e9a9b1bd88f80ff4c88e25db04d5c3539661a3613d3807f0cbce9551d894ab41e0204cfb4ae588124de63f9d947deae26
- SSDEEP 49152:BdN6B3lqwcRR5a2IpUg0fyUe61/eqllOwzbYFUDbhuaf3HRsf1HK1riz:4B3fcs2eUgWe8eqlQwzb2UDtZfBA
- TLSH T1D69619A6F9918536C6ABF23891917220B7717D4D43303BD76FE81A590C2ABC4273FB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_cd4131422f6f11791e117c428c626c2f_cobalt-strike.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_cd4131422f6f11791e117c428c626c2f_cobalt-strike.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
16.9
Botnet
-
b18595b3c17c605a37d21cc880146353
C2
-
https://telegram.me/mjn11a
-
https://steamcommunity.com/profiles/76561198763098204
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0
Targets
-
- Target 2026-07-22_cd4131422f6f11791e117c428c626c2f_cobalt-strike
- Size 8.8MB
- SHA256 4038fbf19ac8df613c3d54b286431725c7578b3bdbb564db8004521c948e14ff
- MD5 cd4131422f6f11791e117c428c626c2f
- SHA1 d65f66b89be661921420ace96626f4f450c8a41a
- SHA512 62c76a78b2b46d6c240a0733589c3c1e9a9b1bd88f80ff4c88e25db04d5c3539661a3613d3807f0cbce9551d894ab41e0204cfb4ae588124de63f9d947deae26
- SSDEEP 49152:BdN6B3lqwcRR5a2IpUg0fyUe61/eqllOwzbYFUDbhuaf3HRsf1HK1riz:4B3fcs2eUgWe8eqlQwzb2UDtZfBA
- TLSH T1D69619A6F9918536C6ABF23891917220B7717D4D43303BD76FE81A590C2ABC4273FB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Vidar Stealer