General
- Target S_t_U_ [U_D].exe
- Size 6.4MB
- Sample260924-2ncfcaytgs
- SHA256 3e1ef59fb6771cd27f6a058415c65888bd5064efc70de0119fd633747b66ccb1
- MD5 13c7b546c72acc9ffbd26a3843270290
- SHA1 a03c942898e922b16b461ba2882baefb1b7177cd
- SHA512 71b92d38ba687a01a1a0d898692cf1c9747218c70e87d9217ef1db42bf358c7c57502e3d4ab1744e77639a86da23f1bdf17e2fd939fa85d20b365ad8b55fda4a
- SSDEEP 98304:h0YLctbwmkrwz2WvIFWjVc4rBZCBN0g46epc640bjjy:cwLTWUWj6GBZC305e6t3jy
- TLSH T140666B0F6891224ADC57C774B3A75524EAB9BC0AC33032D76EC02AB45F777C56AB9B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
S_t_U_ [U_D].exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
S_t_U_ [U_D].exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.5
Botnet
-
444d2b897808ca7363ed5b35ac745432
C2
-
https://172.238.110.27
-
https://t.me/nts33p
-
https://steamcommunity.com/profiles/76561198639924729
-
https://community.fandom.com/wikia.php?controller=UserProfile&method=getUserData&format=json&userId=64140772
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/150.0.0.0 YaBrowser/26.8.0.0
Targets
-
- Target S_t_U_ [U_D].exe
- Size 6.4MB
- SHA256 3e1ef59fb6771cd27f6a058415c65888bd5064efc70de0119fd633747b66ccb1
- MD5 13c7b546c72acc9ffbd26a3843270290
- SHA1 a03c942898e922b16b461ba2882baefb1b7177cd
- SHA512 71b92d38ba687a01a1a0d898692cf1c9747218c70e87d9217ef1db42bf358c7c57502e3d4ab1744e77639a86da23f1bdf17e2fd939fa85d20b365ad8b55fda4a
- SSDEEP 98304:h0YLctbwmkrwz2WvIFWjVc4rBZCBN0g46epc640bjjy:cwLTWUWj6GBZC305e6t3jy
- TLSH T140666B0F6891224ADC57C774B3A75524EAB9BC0AC33032D76EC02AB45F777C56AB9B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10