General
- Target file.exe
- Size 2.9MB
- Sample260728-jac6ls1eke
- SHA256 41fed20077af837483ffa0560041c9d73a79ce6e2289e752733a0cc02cdf271d
- MD5 2b7a9ad8a1204719d2f4cd24c61f092a
- SHA1 19a1286c67f6bf10d12e85396ce601313433bcd8
- SHA512 f13c7222b49144b94459c80551a9af8a1b1fe95584399047ab900728e5800ba838a87ddee9c47ed2531c0b251c5cd3079e09b8909b284c43d320d43577fbd17b
- SSDEEP 24576:zPZkhZn4a7ku7CoKVTaWRcwRn49kehc4VlgMSWM/3txwBele5rK22DNJQnk1n:zPeP4awvoAT96wuNYWR84gn
- TLSH T101D58D076CD149FAD85AA73289B642A67731BC050F3227D72EA077782F72BE09D35784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260513-en
3 signatures
30 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
2.4
Botnet
-
447986aa3bc9ec71f523927c0e405f49
C2
-
https://telegram.me/w09ksp
-
https://steamcommunity.com/profiles/76561198677476289
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/147.0.0.0
Targets
-
- Target file.exe
- Size 2.9MB
- SHA256 41fed20077af837483ffa0560041c9d73a79ce6e2289e752733a0cc02cdf271d
- MD5 2b7a9ad8a1204719d2f4cd24c61f092a
- SHA1 19a1286c67f6bf10d12e85396ce601313433bcd8
- SHA512 f13c7222b49144b94459c80551a9af8a1b1fe95584399047ab900728e5800ba838a87ddee9c47ed2531c0b251c5cd3079e09b8909b284c43d320d43577fbd17b
- SSDEEP 24576:zPZkhZn4a7ku7CoKVTaWRcwRn49kehc4VlgMSWM/3txwBele5rK22DNJQnk1n:zPeP4awvoAT96wuNYWR84gn
- TLSH T101D58D076CD149FAD85AA73289B642A67731BC050F3227D72EA077782F72BE09D35784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtSetInformationThreadHideFromDebugger