General
- Target d282ddd890cb4abca9d57ed70478597ff96a4ff90f02d2072998bf75c74720f7.bin.exe
- Size 4.7MB
- Sample260828-3th1ravakf
- SHA256 d282ddd890cb4abca9d57ed70478597ff96a4ff90f02d2072998bf75c74720f7
- MD5 bb8f6915e2a1b3e560b383c277737a45
- SHA1 c714a1fc13f84e9415ca471cdee951ce88cc87d7
- SHA512 15246486cef155e0a445a6b90b125b42303bc9d71435195d83cf9aa0c40c154f4630ae26b58fc7a4949afae9c053cb578c0d21ad7a81a1d6de2249eeebc34a08
- SSDEEP 98304:aJvNUcVGbX/F8/NQs7kwrZ67yvPgSmAqY:aJvCcEoNQMkwrOOFP
- TLSH T1A8369C037DC591B1C5AADA34C93B4192B238BC84873073E77F45AAB62F367C16AB9741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d282ddd890cb4abca9d57ed70478597ff96a4ff90f02d2072998bf75c74720f7.bin.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d282ddd890cb4abca9d57ed70478597ff96a4ff90f02d2072998bf75c74720f7.bin.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.1
Botnet
-
455e249bd2a5d40afcc8cdc19f7bd2b1
C2
-
https://5.78.91.236
-
https://telegram.me/s11yne
-
https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=roAjr
-
https://steamcommunity.com/profiles/76561198652917381
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:34.0) Gecko/20100101 Firefox/34.0
Targets
-
- Target d282ddd890cb4abca9d57ed70478597ff96a4ff90f02d2072998bf75c74720f7.bin.exe
- Size 4.7MB
- SHA256 d282ddd890cb4abca9d57ed70478597ff96a4ff90f02d2072998bf75c74720f7
- MD5 bb8f6915e2a1b3e560b383c277737a45
- SHA1 c714a1fc13f84e9415ca471cdee951ce88cc87d7
- SHA512 15246486cef155e0a445a6b90b125b42303bc9d71435195d83cf9aa0c40c154f4630ae26b58fc7a4949afae9c053cb578c0d21ad7a81a1d6de2249eeebc34a08
- SSDEEP 98304:aJvNUcVGbX/F8/NQs7kwrZ67yvPgSmAqY:aJvCcEoNQMkwrOOFP
- TLSH T1A8369C037DC591B1C5AADA34C93B4192B238BC84873073E77F45AAB62F367C16AB9741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10