General

  • Target

    b42d63e16b2fe6exeexeexeex.exe

  • Size

    335KB

  • Sample

    230709-x2cwtagc5w

  • MD5

    b42d63e16b2fe616c7c72d3ac42c16f8

  • SHA1

    031e8658567b3023dddbf5b470dc33779c467bad

  • SHA256

    36872d013e7ce3910090a828c7ba793b7fb8559ffc086c3609876cd10b44ebe1

  • SHA512

    73ac68fd391353ca07ab4469b735c8458c17648843ee0f3ddfc776693c82abe9c079a03087f2f57f3a100b741006a7e1f21bce532d9782abc3469d0a2ee69284

  • SSDEEP

    6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTY10qhh4tAjrt:qtUGfVwUFzRG6EQ0POfiTTI0qYAjrt

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

a81bcf59d85e6e13257840e65b9d1da8

C2

https://steamcommunity.com/profiles/76561199511129510

https://t.me/rechnungsbetrag

Attributes
  • profile_id_v2

    a81bcf59d85e6e13257840e65b9d1da8

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Targets

    • Target

      b42d63e16b2fe6exeexeexeex.exe

    • Size

      335KB

    • MD5

      b42d63e16b2fe616c7c72d3ac42c16f8

    • SHA1

      031e8658567b3023dddbf5b470dc33779c467bad

    • SHA256

      36872d013e7ce3910090a828c7ba793b7fb8559ffc086c3609876cd10b44ebe1

    • SHA512

      73ac68fd391353ca07ab4469b735c8458c17648843ee0f3ddfc776693c82abe9c079a03087f2f57f3a100b741006a7e1f21bce532d9782abc3469d0a2ee69284

    • SSDEEP

      6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTY10qhh4tAjrt:qtUGfVwUFzRG6EQ0POfiTTI0qYAjrt

    Score
    3/10

MITRE ATT&CK Matrix

Tasks