General

  • Target

    7ae48a1d76e573_JC.exe

  • Size

    335KB

  • Sample

    230716-vkm94sga32

  • MD5

    7ae48a1d76e573335d06daefed349417

  • SHA1

    1db74cfc726b1cda66e7b22b37285fbfcd237d65

  • SHA256

    86e4b7d51a27ce3fec47bf784320f903b213d824927665819e716ddcfb4c3366

  • SHA512

    d0e09c18a2305e4ef63aa99fa82ecbce1a84306b12b50a85f59bb296d70e7a60fb6477c2116b09fefd5e7c0c35fe806e93d71d1fadc6f23f72e8b7ae7fe20457

  • SSDEEP

    6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTp10qhh4B+Ajrt:qtUGfVwUFzRG6EQ0POfiTTf0qpAjrt

Malware Config

Extracted

Family

vidar

Version

4.2

Botnet

a81bcf59d85e6e13257840e65b9d1da8

C2

https://steamcommunity.com/profiles/76561199511129510

https://t.me/rechnungsbetrag

Attributes
  • profile_id_v2

    a81bcf59d85e6e13257840e65b9d1da8

  • user_agent

    Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.38 Safari/537.36 Brave/75

Targets

    • Target

      7ae48a1d76e573_JC.exe

    • Size

      335KB

    • MD5

      7ae48a1d76e573335d06daefed349417

    • SHA1

      1db74cfc726b1cda66e7b22b37285fbfcd237d65

    • SHA256

      86e4b7d51a27ce3fec47bf784320f903b213d824927665819e716ddcfb4c3366

    • SHA512

      d0e09c18a2305e4ef63aa99fa82ecbce1a84306b12b50a85f59bb296d70e7a60fb6477c2116b09fefd5e7c0c35fe806e93d71d1fadc6f23f72e8b7ae7fe20457

    • SSDEEP

      6144:qtUGfUWOeEBUEhLkXj3zRG6yLQ/UNP4H2CiTTp10qhh4B+Ajrt:qtUGfVwUFzRG6EQ0POfiTTf0qpAjrt

    Score
    5/10
    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

3
T1012

System Information Discovery

2
T1082

Tasks