General
- Target msu.exe
- Size 4.7MB
- Sample261014-s62nhsvs2p
- SHA256 9c712e0fb149b8ae571c7689db39ae72abe1e24472368a17d20714a9612738af
- MD5 2b129a9ebc01808ca58852366b4073bc
- SHA1 415f36e7504c2add0b1a5cb2bfb5d6ef59f85913
- SHA512 92e1d9963202606e31d571beb82d51ea5a2fa3a71ee8ef2ff0ce55525a61c424e7117662c5848c37774e46407a0bc839a40e758e6efe3fc1011ee49daa935dcb
- SSDEEP 49152:+WKYspLyg6nvyQy987L9ORwCFMCWrkZ0OR94BJ8Vgr0W0oQ+M:+45VLoyCFMbre0OR9uS0PLm
- TLSH T142369D03BCA541A9C0AAA7358977425277357C4D4B3223DB2F14B7783E76BD28E7AB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
msu.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
msu.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.8
Botnet
-
2debf41cd243fa04fa0d0ba1afd03826
C2
-
https://31.57.109.102
-
https://t.me/scii0n
-
https://steamcommunity.com/profiles/76561198622044578
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/150.0.0.0 YaBrowser/26.8.0.0
Targets
-
- Target msu.exe
- Size 4.7MB
- SHA256 9c712e0fb149b8ae571c7689db39ae72abe1e24472368a17d20714a9612738af
- MD5 2b129a9ebc01808ca58852366b4073bc
- SHA1 415f36e7504c2add0b1a5cb2bfb5d6ef59f85913
- SHA512 92e1d9963202606e31d571beb82d51ea5a2fa3a71ee8ef2ff0ce55525a61c424e7117662c5848c37774e46407a0bc839a40e758e6efe3fc1011ee49daa935dcb
- SSDEEP 49152:+WKYspLyg6nvyQy987L9ORwCFMCWrkZ0OR94BJ8Vgr0W0oQ+M:+45VLoyCFMbre0OR9uS0PLm
- TLSH T142369D03BCA541A9C0AAA7358977425277357C4D4B3223DB2F14B7783E76BD28E7AB04
- MD5 SHA1 SHA512 SSDEEP TLSH