General
- Target 20cf83f90c2cd92031924de42a2ab3625913a1969949530e0f7a2b23befbd1b7
- Size 10.0MB
- Sample260916-1ph4vaef74
- SHA256 20cf83f90c2cd92031924de42a2ab3625913a1969949530e0f7a2b23befbd1b7
- MD5 203c516db08369ba359169bf5857e8d8
- SHA1 67e9afecdeda231860ffa14082c2ca1a7d29c360
- SHA512 cad339a9216acc70000a8689bc143b2bd9acaa37098442903b35f10f281a72597204463a95b184a0a89effb018049fa84916c19eeed4dd1ba2fb1a79267c3b95
- SSDEEP 49152:XqaMLAhqPhFG0tbaCR4BWw/hRJmcGkIxGcX1njL/:XqB0QpbCl5I
- TLSH T144B6AD0BBCA448F6D4EB92318D7651D27B71FC490E32232B2A90BA793FB77205D49764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
20cf83f90c2cd92031924de42a2ab3625913a1969949530e0f7a2b23befbd1b7.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
1.3
Botnet
-
9387ff9d00667f51c267c34d5056b3c6
C2
-
https://136.243.203.111
-
https://telegram.me/ci0iiif
-
https://steamcommunity.com/profiles/76561198714231957
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:140.0) Gecko/20100101 Firefox/140.0
Targets
-
- Target 20cf83f90c2cd92031924de42a2ab3625913a1969949530e0f7a2b23befbd1b7
- Size 10.0MB
- SHA256 20cf83f90c2cd92031924de42a2ab3625913a1969949530e0f7a2b23befbd1b7
- MD5 203c516db08369ba359169bf5857e8d8
- SHA1 67e9afecdeda231860ffa14082c2ca1a7d29c360
- SHA512 cad339a9216acc70000a8689bc143b2bd9acaa37098442903b35f10f281a72597204463a95b184a0a89effb018049fa84916c19eeed4dd1ba2fb1a79267c3b95
- SSDEEP 49152:XqaMLAhqPhFG0tbaCR4BWw/hRJmcGkIxGcX1njL/:XqB0QpbCl5I
- TLSH T144B6AD0BBCA448F6D4EB92318D7651D27B71FC490E32232B2A90BA793FB77205D49764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Vidar Stealer