General

  • Target

    Set-up.exe

  • Size

    546.4MB

  • Sample

    240227-bdhaqsdb2v

  • MD5

    59b2710c6120d4059f6a3517ee8beae3

  • SHA1

    fc68df0d66802d7ffbe9ac4681aee7461cfe5759

  • SHA256

    65da752a44fd96fc79011c3b15d1e2523daa79c72a07cf9bf68f480cf38e595e

  • SHA512

    54b7caab20a3082965729e9adb8e44e401a5a139f56954598335ca1f56c484ce290a36baccef49465309a795bc5d888a3ea65193eed45ab2ff443681db0bb7fc

  • SSDEEP

    196608:jjrU7vglcF8zp0zKmSMc8lhjjk3D1GMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMl:jRyDSMxfoTH

Malware Config

Extracted

Family

vidar

Version

7.8

Botnet

97b92d10859a319d8736cd53ff3f8868

C2

http://5.252.118.12:80

https://t.me/voolkisms

https://t.me/karl3on

https://steamcommunity.com/profiles/76561199637071579

Attributes
  • profile_id_v2

    97b92d10859a319d8736cd53ff3f8868

  • user_agent

    Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9

Targets

    • Target

      Set-up.exe

    • Size

      546.4MB

    • MD5

      59b2710c6120d4059f6a3517ee8beae3

    • SHA1

      fc68df0d66802d7ffbe9ac4681aee7461cfe5759

    • SHA256

      65da752a44fd96fc79011c3b15d1e2523daa79c72a07cf9bf68f480cf38e595e

    • SHA512

      54b7caab20a3082965729e9adb8e44e401a5a139f56954598335ca1f56c484ce290a36baccef49465309a795bc5d888a3ea65193eed45ab2ff443681db0bb7fc

    • SSDEEP

      196608:jjrU7vglcF8zp0zKmSMc8lhjjk3D1GMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMl:jRyDSMxfoTH

MITRE ATT&CK Matrix

Tasks