General
- Target d3cbbf14e20979a45947d5cb5f4d96279e4a0739c462b8d6d572b26471f7a336.exe
- Size 1.3MB
- Sample261028-xygetsts4n
- SHA256 cb64ad9d8ec392017b99e698f8c56591b50b04044943d3e549eebebfa2b320a3
- MD5 859566ef652a9ed69f72e30d66b34cdc
- SHA1 6f648945fed137c043ab8792934d7f2b296762a7
- SHA512 8ee287d2b3d347f946f8386fc43d4240f417f236830af4b3f06114f0920c1cbbc5b2c2c80a1f3a085086db605ac5d039a3ce4b5ffef89f6af82280b90ca87772
- SSDEEP 12288:cdMtM42Yx3Ws/VuH5HZeoGbWt3K8zbnFhBbrt:5hsHcoi+aGBhB
- TLSH T175551E8FC98223B5F392FB67821ADA265DF6310680728671CF597D359F03E24A424EDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d3cbbf14e20979a45947d5cb5f4d96279e4a0739c462b8d6d572b26471f7a336.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d3cbbf14e20979a45947d5cb5f4d96279e4a0739c462b8d6d572b26471f7a336.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.6
Botnet
-
1c70f10dc61dd7c95ddc61f81f6bf3bb
C2
-
https://t.me/j88hor
-
https://steamcommunity.com/profiles/76561198633950250
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/150.0.0.0 YaBrowser/26.8.0.0
Targets
-
- Target d3cbbf14e20979a45947d5cb5f4d96279e4a0739c462b8d6d572b26471f7a336.exe
- Size 1.3MB
- SHA256 cb64ad9d8ec392017b99e698f8c56591b50b04044943d3e549eebebfa2b320a3
- MD5 859566ef652a9ed69f72e30d66b34cdc
- SHA1 6f648945fed137c043ab8792934d7f2b296762a7
- SHA512 8ee287d2b3d347f946f8386fc43d4240f417f236830af4b3f06114f0920c1cbbc5b2c2c80a1f3a085086db605ac5d039a3ce4b5ffef89f6af82280b90ca87772
- SSDEEP 12288:cdMtM42Yx3Ws/VuH5HZeoGbWt3K8zbnFhBbrt:5hsHcoi+aGBhB
- TLSH T175551E8FC98223B5F392FB67821ADA265DF6310680728671CF597D359F03E24A424EDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10