General

  • Target

    9834880532.zip

  • Size

    294KB

  • Sample

    230401-23frbadc67

  • MD5

    a55551a92e553379cb7398fad7a5ea58

  • SHA1

    7d50c28fab1477832fbbaba32e3be48ceb7e5d7d

  • SHA256

    351dfc9c7b16a9c8005300fc1c71deacc5fb45ea7014c42335caf9e43c8ebccb

  • SHA512

    7c9cf453ba2998af6416a09c295a7df8f9c0e43197ebf85e7a3003d5e15eecf9818a089792b214dc277482b46962bf098304d5388580d21c906f691d2eceb894

  • SSDEEP

    6144:OeOkqTW63QF4g4o3+uik9+tNtfWVzkRpwYxze7QY4vwV:OeODiHF4nMr+tNBo0wYxzzYLV

Malware Config

Extracted

Family

vidar

Version

3

Botnet

e37abeff0df24a473dacaf8467d6fa48

C2

https://t.me/zaskullz

https://steamcommunity.com/profiles/76561199486572327

http://135.181.87.234:80

Attributes
  • profile_id_v2

    e37abeff0df24a473dacaf8467d6fa48

Targets

    • Target

      be82beca4c46e17fb1d4e7f23cf028f61b0d6e64d39146f31f1e7072ecf95fbe

    • Size

      1024KB

    • MD5

      f7fd4791be2e2624b7fbb1d91ab2f539

    • SHA1

      5e293bd82fc478a0891a092e02a7576d6a9799d9

    • SHA256

      be82beca4c46e17fb1d4e7f23cf028f61b0d6e64d39146f31f1e7072ecf95fbe

    • SHA512

      340d18119fe408976e06e78ab8fa44c900981b25025389e6da674d662945986456d6ed98ffc7a478ff9583b147cb77a4df339e6e4b9734952c69693e53e20882

    • SSDEEP

      6144:7GZnGSyQWFr8FG6d68UeCVMlVTgjwAaTJVM0ASpk4hHsbPZ0kuydk3CKxh4:aXy7YKxeCVgxJA0ASp2tA

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Matrix

Tasks