General
- Target dollar.exe
- Size 1.3MB
- Sample260730-hthd1ashka
- SHA256 7ca92a98fd8560acf02d252b76b426e81e995587cd81fe5f5fe0944008e3cea8
- MD5 1b6ef1d87f6fc98261cfbdfec854878a
- SHA1 53c1557348f5abea772e6c07bec65f55dc0504ff
- SHA512 0d1f1f53b6f9c156330a0eaf9a53ba7875872693191e960900e308ca208f5c62c868e26c8c6ea100647b17a6727c841e2ca8244316e8e28c4132de4563f107ab
- SSDEEP 24576:HWNTOBOhFApkgqlvIXLfUk+4HfV5izkNkhiNOmJt1rqQnLY/nMBKjRMRP/:8TmOhWpGmd4kHNZt1FMMBKFM
- TLSH T1805533975C34C6D2D92387729803F8266B32B4CA0744D2F71F76962C6AAD7E81D7D701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dollar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
2.6
Botnet
-
ebafe68f1abf9684496bf287c2ae9f3d
C2
-
https://87.58.201.224
-
https://t.me/np33yk
-
https://steamcommunity.com/profiles/76561198671804195
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/144.0.0.0
Targets
-
- Target dollar.exe
- Size 1.3MB
- SHA256 7ca92a98fd8560acf02d252b76b426e81e995587cd81fe5f5fe0944008e3cea8
- MD5 1b6ef1d87f6fc98261cfbdfec854878a
- SHA1 53c1557348f5abea772e6c07bec65f55dc0504ff
- SHA512 0d1f1f53b6f9c156330a0eaf9a53ba7875872693191e960900e308ca208f5c62c868e26c8c6ea100647b17a6727c841e2ca8244316e8e28c4132de4563f107ab
- SSDEEP 24576:HWNTOBOhFApkgqlvIXLfUk+4HfV5izkNkhiNOmJt1rqQnLY/nMBKjRMRP/:8TmOhWpGmd4kHNZt1FMMBKFM
- TLSH T1805533975C34C6D2D92387729803F8266B32B4CA0744D2F71F76962C6AAD7E81D7D701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtSetInformationThreadHideFromDebugger