General

  • Target

    1nstaIIER-S4t-UP.rar

  • Size

    123.0MB

  • Sample

    240324-etm3pshf27

  • MD5

    68f147e3b4adba7973bc414db731b888

  • SHA1

    29fb5fa1f4170f2dd58e4d28f325fd5ee0e2b270

  • SHA256

    29a245f9b70d99e57dd0fda398d88029c4f258d74f805eaf5c1c8e7aba042fdd

  • SHA512

    bb0eff75daac6c88f708c025b2bebfd00d52d8db3953e73230ee8459f6021d827123c2a7d1d9343501b050bc5716e8ed4069e4555995e7a03ced8ec26efe687c

  • SSDEEP

    3145728:EDPNOdh5gi0uX+gYkDbxUlY5bBEihprWlrzik:EjNwhbxYk3xUwB3YOk

Malware Config

Extracted

Family

vidar

Version

7.8

Botnet

97b92d10859a319d8736cd53ff3f8868

C2

http://5.252.118.12:80

https://t.me/voolkisms

https://t.me/karl3on

https://steamcommunity.com/profiles/76561199637071579

Attributes
  • profile_id_v2

    97b92d10859a319d8736cd53ff3f8868

  • user_agent

    Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9

Targets

    • Target

      LauncherPC_S0FT/Setup.exe

    • Size

      596.1MB

    • MD5

      50e223cad778bd1522afb534c1001778

    • SHA1

      c7d7c614db48197e4474bfb496fce381ece2cb2f

    • SHA256

      4aa7d4f2627fd363785f92635f3d3aebb2256a2366517fe50868f38c2563b1f9

    • SHA512

      3e236b0655e45f7b1aa8a91c719a6d3c093a769971b9f3e17492b49f62eafbbc3bd0ffd3a9eceee86b262899174b2fc00df902d5a31686bb394a857c13f0004e

    • SSDEEP

      196608:jjrU7vglcF8zp0zKmSMc8lhjjk3D1GMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGM0:jRyDSMxfoTC

MITRE ATT&CK Matrix

Tasks