General
- Target S_t_U_ [U_D].exe
- Size 15.4MB
- Sample260930-2clvms1vfy
- SHA256 635c00e41cac9f5c9d76e6ca8917ec0b388a58977bc05e82ca0421b99fc9bf87
- MD5 05bd040d7b8e38bea6dc2181b557d256
- SHA1 c3eda11cd31f656a91773d72ade7694db10823f1
- SHA512 2f923948114e145847b65aaf0cb197c911c9bd1995ae3c8866d7d92038a5950bf239c6fdb9c2204b303d77d451a012c2ec39b0994b4cf5f4a6278fba5a62a315
- SSDEEP 49152:8QdeclH30brb/TGvO90d7HjmAFd4A64nsfJxkz/rgre5XqUinCZjJtW11VLnXE0/:PH3PV5Ke9euwRnsCI4oup
- TLSH T1C5F6C507E24510DCCA4BDF3180B52A7922B23DED96317A5A4ED9BF902F197A17BDCB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
S_t_U_ [U_D].exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
S_t_U_ [U_D].exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.6
Botnet
-
9e0d83f4fb041ecb48f78fb49db965b0
C2
-
https://172.233.32.123
-
https://telegram.me/j88hor
-
https://community.fandom.com/wikia.php?controller=UserProfile&method=getUserData&format=json&userId=64296247
-
https://steamcommunity.com/profiles/76561198633950250
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/150.0.0.0 YaBrowser/26.8.0.0
Targets
-
- Target S_t_U_ [U_D].exe
- Size 15.4MB
- SHA256 635c00e41cac9f5c9d76e6ca8917ec0b388a58977bc05e82ca0421b99fc9bf87
- MD5 05bd040d7b8e38bea6dc2181b557d256
- SHA1 c3eda11cd31f656a91773d72ade7694db10823f1
- SHA512 2f923948114e145847b65aaf0cb197c911c9bd1995ae3c8866d7d92038a5950bf239c6fdb9c2204b303d77d451a012c2ec39b0994b4cf5f4a6278fba5a62a315
- SSDEEP 49152:8QdeclH30brb/TGvO90d7HjmAFd4A64nsfJxkz/rgre5XqUinCZjJtW11VLnXE0/:PH3PV5Ke9euwRnsCI4oup
- TLSH T1C5F6C507E24510DCCA4BDF3180B52A7922B23DED96317A5A4ED9BF902F197A17BDCB04
- MD5 SHA1 SHA512 SSDEEP TLSH