General

  • Target

    Setup.exe

  • Size

    780.4MB

  • Sample

    240405-b2t97sgf81

  • MD5

    828cfb01ed3c8a4fbe4960bc43bb3034

  • SHA1

    cb44421d5eaa4930e115bc9c41803e3d04cc319c

  • SHA256

    0f607419c8b451afe789cc226345c33ed0370fc0ec670171676d74f8ff1d44e9

  • SHA512

    1bedd5815ad14aa2298bff7f82e33a63358e99c107cecf8f5c0c7a8fd2fcc1ea9598b3dea519e89949d815166138a984dc721df55904329fa2b76dae527f86c7

  • SSDEEP

    196608:jjrU7vglcF8zp0zKmSMc8lhjjk3D1GMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMF:jRyDSMxfoTM6

Malware Config

Extracted

Family

vidar

Version

7.8

Botnet

97b92d10859a319d8736cd53ff3f8868

C2

http://5.252.118.12:80

https://t.me/voolkisms

https://t.me/karl3on

https://steamcommunity.com/profiles/76561199637071579

Attributes
  • profile_id_v2

    97b92d10859a319d8736cd53ff3f8868

  • user_agent

    Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9

Targets

    • Target

      Setup.exe

    • Size

      780.4MB

    • MD5

      828cfb01ed3c8a4fbe4960bc43bb3034

    • SHA1

      cb44421d5eaa4930e115bc9c41803e3d04cc319c

    • SHA256

      0f607419c8b451afe789cc226345c33ed0370fc0ec670171676d74f8ff1d44e9

    • SHA512

      1bedd5815ad14aa2298bff7f82e33a63358e99c107cecf8f5c0c7a8fd2fcc1ea9598b3dea519e89949d815166138a984dc721df55904329fa2b76dae527f86c7

    • SSDEEP

      196608:jjrU7vglcF8zp0zKmSMc8lhjjk3D1GMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMGMF:jRyDSMxfoTM6

MITRE ATT&CK Matrix

Tasks