vidar | 35bf676f97e2f6ffb96006c99d2f27cd175436e291a7f5b5e6f7d67f5b1326f3 | Triage

Sharing

General

Target

a3f32ae6acdf14b5d05664daf70541c6_mafia_JC.exe
Size

368KB
Sample

230809-tc816scf75
MD5

a3f32ae6acdf14b5d05664daf70541c6
SHA1

f546f74e02e6a0ef726a42a8fbec3c0098b08b84
SHA256

35bf676f97e2f6ffb96006c99d2f27cd175436e291a7f5b5e6f7d67f5b1326f3
SHA512

c52398e64714acf3ea6d03cc62eb0e1b94cb3cab0796ce287ef3dfe47cacbc6d90ae63e775b1ebd441a8492410b68e5215aa20299dbfaef493cc5df5710a5472
SSDEEP

6144:qHd2snwZDkCUbuu3zt3FrNPMXDuOYijvafGtfhDV9XUBiljAvC:qHd2sncDkC03JFlMXKujvafGBhDV97z

Score

10^/10

vidar 14

Malware Config

Extracted

Family

vidar

Version

2.4

Botnet

14

C2

https://t.me/gurutist

https://steamcommunity.com/profiles/76561199476091435

http://95.216.164.28:80

Attributes

profile_id
14
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36

Targets

- Target
  
  a3f32ae6acdf14b5d05664daf70541c6_mafia_JC.exe
- Size
  
  368KB
- MD5
  
  a3f32ae6acdf14b5d05664daf70541c6
- SHA1
  
  f546f74e02e6a0ef726a42a8fbec3c0098b08b84
- SHA256
  
  35bf676f97e2f6ffb96006c99d2f27cd175436e291a7f5b5e6f7d67f5b1326f3
- SHA512
  
  c52398e64714acf3ea6d03cc62eb0e1b94cb3cab0796ce287ef3dfe47cacbc6d90ae63e775b1ebd441a8492410b68e5215aa20299dbfaef493cc5df5710a5472
- SSDEEP
  
  6144:qHd2snwZDkCUbuu3zt3FrNPMXDuOYijvafGtfhDV9XUBiljAvC:qHd2sncDkC03JFlMXKujvafGBhDV97z
Score

3^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2