General

  • Target

    800-58-0x00000000001A0000-0x00000000006EE000-memory.dmp

  • Size

    5.3MB

  • Sample

    221117-v568qafb32

  • MD5

    0801c6ffe932b096e51aad3ddaf75784

  • SHA1

    1b1abc9899e4bca0d5a176206548b7bfd912f864

  • SHA256

    78c81aa141a982a7090b7816775f408c0e65dbcf563663aac7bd9698d69b5b5e

  • SHA512

    cb52f3865b849c511d761bcd8ef028ada785498dd89c74617930d49d75a48dd2936a3e982fd1fc40628c6ebfd509800fad5dd8940daf06befa8f0df03d72c559

  • SSDEEP

    98304:ikCBSn521+cQafSR654zrPp8/Rq3ZEVMEbxCFJiT0Gu4uyeZT:iQ41CR65OpsEZEV7dMJiAMuRT

Malware Config

Extracted

Family

vidar

Version

53.4

Botnet

1364

C2

https://t.me/cheaptrains

https://mastodon.social/@ffolegg94

Attributes
  • profile_id

    1364

Targets

    • Target

      800-58-0x00000000001A0000-0x00000000006EE000-memory.dmp

    • Size

      5.3MB

    • MD5

      0801c6ffe932b096e51aad3ddaf75784

    • SHA1

      1b1abc9899e4bca0d5a176206548b7bfd912f864

    • SHA256

      78c81aa141a982a7090b7816775f408c0e65dbcf563663aac7bd9698d69b5b5e

    • SHA512

      cb52f3865b849c511d761bcd8ef028ada785498dd89c74617930d49d75a48dd2936a3e982fd1fc40628c6ebfd509800fad5dd8940daf06befa8f0df03d72c559

    • SSDEEP

      98304:ikCBSn521+cQafSR654zrPp8/Rq3ZEVMEbxCFJiT0Gu4uyeZT:iQ41CR65OpsEZEV7dMJiAMuRT

    Score
    1/10

MITRE ATT&CK Matrix

Tasks