General

  • Target

    6fc66d672ddaea6f4ab22caa7e11b151_mafia_JC.exe

  • Size

    772KB

  • MD5

    6fc66d672ddaea6f4ab22caa7e11b151

  • SHA1

    2e81699765b2953ea05023c095124d94b2c944c5

  • SHA256

    68bcdc9b8bdf6af5ce2237cf535d75107a1447dc214dd80706a4ffc01fc7e882

  • SHA512

    3b9c3bd55feefc6d5cd87c37eb10ffa48a060dec2cc6ab43229ed005700f57628f8393ba207081e040f864f73e756578e648813e137829469e81be14ee3236d2

  • SSDEEP

    24576:yRu16WYdRNDl0Et8uEXE6dl5H92r5HpTNY:OVNDl0Et8uEXE6ds1HpT

Malware Config

Extracted

Family

vidar

Version

4.9

Botnet

f090959db6a58d8ce856da5a5eb9511f

C2

https://t.me/dastantim

https://steamcommunity.com/profiles/76561199529242058

Attributes
  • profile_id_v2

    f090959db6a58d8ce856da5a5eb9511f

  • user_agent

    Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 Vivaldi/3.7

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6fc66d672ddaea6f4ab22caa7e11b151_mafia_JC.exe
    .exe windows x86

    7d594973434539b63f110ff65422442a


    Headers

    Imports

    Sections