General

  • Target

    e0c16a97ecaa64ab3dd59786ea27b647

  • Size

    688KB

  • Sample

    231220-tfxsbaechr

  • MD5

    e0c16a97ecaa64ab3dd59786ea27b647

  • SHA1

    c0e02420af8b64faf884616eef9013335dfeb343

  • SHA256

    93270d239a6f026b8578fa0d83f85e5315b5dd64d1e234f83e116f01ac857534

  • SHA512

    983e25fb6827a3afac33e2264eb3e27bde1ac8e59c89685c93c9da5241e45b8b0a90e2c9026c8cb5d7a8971ae6a195c94a4086745762f32c0096fa6bb68f263f

  • SSDEEP

    12288:+0qhCDnqSgPaPQlGqPvLWfubwv4fegO0WIYBqEr39LZ9v:Uot68qHeubw02UYlZ9v

Score
10/10

Malware Config

Extracted

Family

vidar

Version

41.1

Botnet

937

C2

https://mas.to/@bardak1ho

Attributes
  • profile_id

    937

Targets

    • Target

      e0c16a97ecaa64ab3dd59786ea27b647

    • Size

      688KB

    • MD5

      e0c16a97ecaa64ab3dd59786ea27b647

    • SHA1

      c0e02420af8b64faf884616eef9013335dfeb343

    • SHA256

      93270d239a6f026b8578fa0d83f85e5315b5dd64d1e234f83e116f01ac857534

    • SHA512

      983e25fb6827a3afac33e2264eb3e27bde1ac8e59c89685c93c9da5241e45b8b0a90e2c9026c8cb5d7a8971ae6a195c94a4086745762f32c0096fa6bb68f263f

    • SSDEEP

      12288:+0qhCDnqSgPaPQlGqPvLWfubwv4fegO0WIYBqEr39LZ9v:Uot68qHeubw02UYlZ9v

    Score
    10/10

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks