General

  • Target

    340-3-0x0000000000400000-0x0000000001A38000-memory.dmp

  • Size

    22.2MB

  • Sample

    240301-v3lt1aah45

  • MD5

    7a0a64840d64fa08bed9d349f7c5ee28

  • SHA1

    92b8268ce363c5cb98fc5756b1b58f8d50fa762a

  • SHA256

    35fd05e8ad4a7d8423c10d054d6c1aa519f69b2a70b673597bbc5f3aee52a1ee

  • SHA512

    e8cf0cb69bb20574b196b9b130cb6062cb69b3d2d3fd3a677306f83bfb6175ce80e17cbd52a7e8221fb9d5155ec76ed565bafc94d74e5fa1ea1deb8be436ceee

  • SSDEEP

    3072:y63TZcqNNrry1kYGpQ7EwaRA1kI7cEjL44fZi+R61KHby2pITkW0/V9:y6Vxvy1NGpQgoz7PL7xiiW2pIT90

Malware Config

Extracted

Family

vidar

Version

8

Botnet

438c7562661d92141bb0adbe01c2fc5f

C2

https://steamcommunity.com/profiles/76561199644883218

https://t.me/neoschats

Attributes
  • profile_id_v2

    438c7562661d92141bb0adbe01c2fc5f

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target

      340-3-0x0000000000400000-0x0000000001A38000-memory.dmp

    • Size

      22.2MB

    • MD5

      7a0a64840d64fa08bed9d349f7c5ee28

    • SHA1

      92b8268ce363c5cb98fc5756b1b58f8d50fa762a

    • SHA256

      35fd05e8ad4a7d8423c10d054d6c1aa519f69b2a70b673597bbc5f3aee52a1ee

    • SHA512

      e8cf0cb69bb20574b196b9b130cb6062cb69b3d2d3fd3a677306f83bfb6175ce80e17cbd52a7e8221fb9d5155ec76ed565bafc94d74e5fa1ea1deb8be436ceee

    • SSDEEP

      3072:y63TZcqNNrry1kYGpQ7EwaRA1kI7cEjL44fZi+R61KHby2pITkW0/V9:y6Vxvy1NGpQgoz7PL7xiiW2pIT90

    Score
    1/10

MITRE ATT&CK Matrix

Tasks