General

  • Target

    22856a6c833d238fca56eabc3398b1118a2893f0995448ca69c19a40d07f50de

  • Size

    2.6MB

  • Sample

    240305-ss397ahh5w

  • MD5

    8a24042598b0c07c593a6f728379ed12

  • SHA1

    cfc334ef264e339084f5f9a425a1d8e3c7af98a8

  • SHA256

    22856a6c833d238fca56eabc3398b1118a2893f0995448ca69c19a40d07f50de

  • SHA512

    61cd3180261e538879e2c8eed8012107ad357e52fdd453c0038701228ce6b7e770a90ca1c941d3e1e05720eed881ebdeeae5d50e7ef48492aa265e0b60ef2484

  • SSDEEP

    49152:VTCVHed6FUSPFMiy7J7Sy2/tTuUhnKLvO+MpfCGl9xh6Z:UUdCNPuhl7y/tlnKa+wfCGrw

Malware Config

Extracted

Family

vidar

Version

8

Botnet

a2fafb95617b0c4575ae879e558a67a9

C2

https://t.me/neoschats

https://steamcommunity.com/profiles/76561199644883218

Attributes
  • profile_id_v2

    a2fafb95617b0c4575ae879e558a67a9

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target

      22856a6c833d238fca56eabc3398b1118a2893f0995448ca69c19a40d07f50de

    • Size

      2.6MB

    • MD5

      8a24042598b0c07c593a6f728379ed12

    • SHA1

      cfc334ef264e339084f5f9a425a1d8e3c7af98a8

    • SHA256

      22856a6c833d238fca56eabc3398b1118a2893f0995448ca69c19a40d07f50de

    • SHA512

      61cd3180261e538879e2c8eed8012107ad357e52fdd453c0038701228ce6b7e770a90ca1c941d3e1e05720eed881ebdeeae5d50e7ef48492aa265e0b60ef2484

    • SSDEEP

      49152:VTCVHed6FUSPFMiy7J7Sy2/tTuUhnKLvO+MpfCGl9xh6Z:UUdCNPuhl7y/tlnKa+wfCGrw

MITRE ATT&CK Enterprise v15

Tasks