General

  • Target

    577e024ef182cc92b1b9c7faf2594b65_mafia_JC.exe

  • Size

    467KB

  • MD5

    577e024ef182cc92b1b9c7faf2594b65

  • SHA1

    1ca37a135387626901e3f826cf677ac037758e12

  • SHA256

    c8726cbbfe615490ffcdfa621101f85071827de65614649a19a3f9f41fbc1791

  • SHA512

    e74b28945e4ea66fc8b5279c5ee2aa5da1bf27b9034f69f1465d8549deef85ad0f249c35f1678ba36016d6444ddb45fcfba5b1fb10f8fea6470589b9938eab82

  • SSDEEP

    12288:yMqFYULoWzniwtgGbl6mw/YAMOtwhF5JBqylCnee+:yMqFbniCgGZ6T/DMO25Jzoned

Malware Config

Extracted

Family

vidar

Version

5

Botnet

988f9fc7b037f9cee85f694e9d8825e5

C2

https://t.me/versozaline

https://steamcommunity.com/profiles/76561199532186526

Attributes
  • profile_id_v2

    988f9fc7b037f9cee85f694e9d8825e5

  • user_agent

    Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 577e024ef182cc92b1b9c7faf2594b65_mafia_JC.exe
    .exe windows x86

    eb946a5d419bb360e395b3426711b797


    Headers

    Imports

    Sections