General

  • Target

    file.exe

  • Size

    303KB

  • Sample

    240301-v1zm3sah27

  • MD5

    7ee46544312f9217a04c6ecae3c637b2

  • SHA1

    cb6332410c4d37dd6ce9929cc93adaaeff19ab20

  • SHA256

    523beeb57c19076e7177e7a016bab52ff21ac5ecbbbafd0b8dc5c8dc5b9d5cc1

  • SHA512

    4cfc93c28678f60dba4c143708dd2a25588dfa878fac2630ec80ab5644178bdc7ea7b39173f739e808890da9c5696e5175f77907ba1da0654a6e126660d91c68

  • SSDEEP

    3072:kL6X++3PKOpTpbpav1zakS5Miid0IoPmDj5dzx1U1PB3/EyXW/Q5dTTkW0/V9:c6tPKOxpg9W5MKIoP2dk1PuyScTT90

Malware Config

Extracted

Family

vidar

Version

8

Botnet

438c7562661d92141bb0adbe01c2fc5f

C2

https://steamcommunity.com/profiles/76561199644883218

https://t.me/neoschats

Attributes
  • profile_id_v2

    438c7562661d92141bb0adbe01c2fc5f

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target

      file.exe

    • Size

      303KB

    • MD5

      7ee46544312f9217a04c6ecae3c637b2

    • SHA1

      cb6332410c4d37dd6ce9929cc93adaaeff19ab20

    • SHA256

      523beeb57c19076e7177e7a016bab52ff21ac5ecbbbafd0b8dc5c8dc5b9d5cc1

    • SHA512

      4cfc93c28678f60dba4c143708dd2a25588dfa878fac2630ec80ab5644178bdc7ea7b39173f739e808890da9c5696e5175f77907ba1da0654a6e126660d91c68

    • SSDEEP

      3072:kL6X++3PKOpTpbpav1zakS5Miid0IoPmDj5dzx1U1PB3/EyXW/Q5dTTkW0/V9:c6tPKOxpg9W5MKIoP2dk1PuyScTT90

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks