General

  • Target

    8277442b50c1270e061eb798f3f3b8e2.bin

  • Size

    200.4MB

  • Sample

    240227-clt5yadh89

  • MD5

    8277442b50c1270e061eb798f3f3b8e2

  • SHA1

    8136d24f467f4b624b20ec45edd515060d9ac636

  • SHA256

    f5e03adf5f036e96aabfb0573890a026d58531d5f3fd2f0dbb313a14c9c3af72

  • SHA512

    89d0e51b206d8c1de490868c8792badacfe137986d98dcea60a4e254deeb0c794293010414b214d52dd7e809bd700f0dd528f761ef4d3ab0e8fa7fa1f2d01f5b

  • SSDEEP

    3145728:oQx1POYvYzzXh28acwIXhQs9cxlb52SJh61NEoY0c8zF2xcgPxT8x:oQPp292GFqxloSJwNEoJX2tJ8x

Malware Config

Extracted

Family

vidar

Version

7.8

Botnet

97b92d10859a319d8736cd53ff3f8868

C2

http://5.252.118.12:80

https://t.me/voolkisms

https://t.me/karl3on

https://steamcommunity.com/profiles/76561199637071579

Attributes
  • profile_id_v2

    97b92d10859a319d8736cd53ff3f8868

  • user_agent

    Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9

Targets

    • Target

      Set-up.exe

    • Size

      780.4MB

    • MD5

      828cfb01ed3c8a4fbe4960bc43bb3034

    • SHA1

      cb44421d5eaa4930e115bc9c41803e3d04cc319c

    • SHA256

      0f607419c8b451afe789cc226345c33ed0370fc0ec670171676d74f8ff1d44e9

    • SHA512

      1bedd5815ad14aa2298bff7f82e33a63358e99c107cecf8f5c0c7a8fd2fcc1ea9598b3dea519e89949d815166138a984dc721df55904329fa2b76dae527f86c7

    • SSDEEP

      196608:jjrU7vglcF8zp0zKmSMc8lhjjk3D1GMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMF:jRyDSMxfoTM6

MITRE ATT&CK Matrix

Tasks