General

  • Target

    3236459655ba0fe656a0315ff00f61c1f8f853ae73347abf8bccc630a044774b.zip

  • Size

    185KB

  • Sample

    240402-msmdsafe7s

  • MD5

    7b4b82b151b50ce30c94264f24364ddd

  • SHA1

    376427de0100d8c1093ca4b948aaf5bec48c700c

  • SHA256

    f1fb3e3d932598386750061c2e247acff7a1a5df55d9930c10aeab52907d0eef

  • SHA512

    fd4db30d020486b23a2f6ae46aeaa81e96f0016c141fcef157777698e4f45e61a448ae7590116389557cf0b79b64b128100c0c53510ad72d8a3b89644861667e

  • SSDEEP

    3072:vU9tH75i04kB/DF9TLWqyA0CGgwrElMDW5jBkWyMV6hGNqNI+WucA7CbDAS1HMSq:vg8kTWqyA0CGho66Bk/xDNI+zcAtS1Hw

Malware Config

Extracted

Family

vidar

Version

8.6

Botnet

22d12fb91f01647fe2107fec81f0cc22

C2

https://steamcommunity.com/profiles/76561199658817715

https://t.me/sa9ok

Attributes
  • profile_id_v2

    22d12fb91f01647fe2107fec81f0cc22

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Targets

    • Target

      3236459655ba0fe656a0315ff00f61c1f8f853ae73347abf8bccc630a044774b.exe

    • Size

      331KB

    • MD5

      5f6e3dda73b232eaa8792f5880b6a90c

    • SHA1

      5a51c5aa0cc796d0d5d6c530dc99f0fb81d37a7a

    • SHA256

      3236459655ba0fe656a0315ff00f61c1f8f853ae73347abf8bccc630a044774b

    • SHA512

      c7bc42aca05d473f68d9eace4b61e18d3041b89af3ea60679466dd142b53efae698e5232389adcd933cb8a312a58de59e1bfc642322ed9d41e57ac5780e51084

    • SSDEEP

      3072:+lMaCCfSxZQTu+lliXOOS5rO3LBCZcJOIgB/50+IaUnoHyKnD7oTk6pfApTxe+FG:+lpM9HORot4wO5/K+owyKnDTEOT0+FG

MITRE ATT&CK Enterprise v15

Tasks