General
- Target msu.exe
- Size 8.1MB
- Sample261011-ygds2set6p
- SHA256 8807ed246292306da329d78003ae18325da5e5c587fd698391b060625694e925
- MD5 c5fcf7ce26cc866cb6dd28279d22e03c
- SHA1 8bc0e643151732a59951db651383c0bbabdb5c99
- SHA512 7aa2a3d124844242ed8b6d237166bb77b1dbea5fc79fd683495a24c6a5d480d251260e3218dff906e08f3d3c3b507064552888241f36f62afea3af66be856145
- SSDEEP 24576:09WkLn5c2Jx7bhdgWgUjpKI0YqSlnK/j9ZC8/fhxxOJ/dWV+yd0LhHjxU/1PjvAC:0f5c2JZbh2UjplxTlK/jQkWyUV0Pbbf
- TLSH T1B986D65971C410EDCA8E837608F45DAA27B21DBB1713A7CB07A5BBA42F13BE55F30948
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
msu.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
msu.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.8
Botnet
-
fc53a5301d9a259bbf2af89c45ee6787
C2
-
https://95.182.97.240
-
https://telegram.me/scii0n
-
https://steamcommunity.com/profiles/76561198628246386
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/150.0.0.0 YaBrowser/26.8.0.0
Targets
-
- Target msu.exe
- Size 8.1MB
- SHA256 8807ed246292306da329d78003ae18325da5e5c587fd698391b060625694e925
- MD5 c5fcf7ce26cc866cb6dd28279d22e03c
- SHA1 8bc0e643151732a59951db651383c0bbabdb5c99
- SHA512 7aa2a3d124844242ed8b6d237166bb77b1dbea5fc79fd683495a24c6a5d480d251260e3218dff906e08f3d3c3b507064552888241f36f62afea3af66be856145
- SSDEEP 24576:09WkLn5c2Jx7bhdgWgUjpKI0YqSlnK/j9ZC8/fhxxOJ/dWV+yd0LhHjxU/1PjvAC:0f5c2JZbh2UjplxTlK/jQkWyUV0Pbbf
- TLSH T1B986D65971C410EDCA8E837608F45DAA27B21DBB1713A7CB07A5BBA42F13BE55F30948
- MD5 SHA1 SHA512 SSDEEP TLSH