General
- Target SecuriteInfo.com.Win64.Evo-gen.64556947.exe
- Size 2.8MB
- Sample260728-h84wjsdp4v
- SHA256 6bbb7c702460cca08c4c809ec44cf27675f2ba016915f69ba740ed64dc73f288
- MD5 6cf860452c9b5cf8172c5217812cd626
- SHA1 4613228f0f901a7e6172bbc39e645ba96c8bdb5d
- SHA512 565b32a1e96c4df38deb90214d8d59863f7f6b8c3701df9ad20508d63f5d318a815bc991500ad6324d71e7a2a1ad6193c7582a4714cd044c74b13baf057d2b72
- SSDEEP 49152:X9dMcKPF0NCvc7A4n2NNBQnKtNCud0aQE5QpWdafF509QfElz7f:X97d9+sKt5dm+YWE9509QYf
- TLSH T185D58E0BBCE049E5D8AA533649B652923B35FC154F3123C72E90B7382F76AE09C79794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.Evo-gen.64556947.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
2.4
Botnet
-
e1aecbee74591adfdcd5a31f377b963a
C2
-
https://wts.tb88vip.top
-
https://telegram.me/w09ksp
-
https://steamcommunity.com/profiles/76561198677476289
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/147.0.0.0
Targets
-
- Target SecuriteInfo.com.Win64.Evo-gen.64556947.exe
- Size 2.8MB
- SHA256 6bbb7c702460cca08c4c809ec44cf27675f2ba016915f69ba740ed64dc73f288
- MD5 6cf860452c9b5cf8172c5217812cd626
- SHA1 4613228f0f901a7e6172bbc39e645ba96c8bdb5d
- SHA512 565b32a1e96c4df38deb90214d8d59863f7f6b8c3701df9ad20508d63f5d318a815bc991500ad6324d71e7a2a1ad6193c7582a4714cd044c74b13baf057d2b72
- SSDEEP 49152:X9dMcKPF0NCvc7A4n2NNBQnKtNCud0aQE5QpWdafF509QfElz7f:X97d9+sKt5dm+YWE9509QYf
- TLSH T185D58E0BBCE049E5D8AA533649B652923B35FC154F3123C72E90B7382F76AE09C79794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtSetInformationThreadHideFromDebugger