General

  • Target

    063b50e3ae9973exeexeexeex.exe

  • Size

    335KB

  • Sample

    230705-sl9hmaeh2y

  • MD5

    063b50e3ae9973dc54a3804c36bb97a7

  • SHA1

    02e7e80e55e264a73d17d1f83b610c6cc9a998c2

  • SHA256

    48100002696a1dd55b24c347e0049b75877b72bb7cddbca9f9ec4676e8722321

  • SHA512

    8e74edb7292f81ac595a8e0431bb3dc49c42f9ac83ba308507d7d944aebf95fa56e6a07c12d53679b2fdc82908e58e03b8548db6eb45825c97c15a541a4d1656

  • SSDEEP

    6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTT+10qhh4RAjrt:qtUGfVwUFzRG6EQ0POfiTTG0q8Ajrt

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

a81bcf59d85e6e13257840e65b9d1da8

C2

https://steamcommunity.com/profiles/76561199511129510

https://t.me/rechnungsbetrag

Attributes
  • profile_id_v2

    a81bcf59d85e6e13257840e65b9d1da8

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Targets

    • Target

      063b50e3ae9973exeexeexeex.exe

    • Size

      335KB

    • MD5

      063b50e3ae9973dc54a3804c36bb97a7

    • SHA1

      02e7e80e55e264a73d17d1f83b610c6cc9a998c2

    • SHA256

      48100002696a1dd55b24c347e0049b75877b72bb7cddbca9f9ec4676e8722321

    • SHA512

      8e74edb7292f81ac595a8e0431bb3dc49c42f9ac83ba308507d7d944aebf95fa56e6a07c12d53679b2fdc82908e58e03b8548db6eb45825c97c15a541a4d1656

    • SSDEEP

      6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTT+10qhh4RAjrt:qtUGfVwUFzRG6EQ0POfiTTG0q8Ajrt

    Score
    3/10

MITRE ATT&CK Matrix

Tasks