General

  • Target

    95b3083f8e10e0c0d140eae906eb5836e617bd0337f170818133e009d2319d49

  • Size

    185KB

  • Sample

    240417-qqdweaba41

  • MD5

    7ff78ba2f3e9006a2b24063287c48540

  • SHA1

    3bc2109d8fa2f78f995ba4ec54dcdce425495bf9

  • SHA256

    95b3083f8e10e0c0d140eae906eb5836e617bd0337f170818133e009d2319d49

  • SHA512

    1d0371e6d0980275e0b52308a685cb80555ce7a24ee6acb29e86c8d526b01aaee67a50015f5906dbc8965496a271d15b8b4641da061bcd355edf62a8334c57e1

  • SSDEEP

    3072:BmOFYaCSXFZKQ2drOaxJjGTczV1q9YOuNmytKK0cWlYFmueUFfnPzC1uoTcgNenh:BmO/CrXTi9wTW+95F/PzIbcgNSjuk

Malware Config

Extracted

Family

vidar

Version

8.6

Botnet

22d12fb91f01647fe2107fec81f0cc22

C2

https://steamcommunity.com/profiles/76561199658817715

https://t.me/sa9ok

Attributes
  • profile_id_v2

    22d12fb91f01647fe2107fec81f0cc22

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Targets

    • Target

      eb234ba5cceaf5c22e7d59c0d5d6cda995da1129188f47a1c44523ab94f3cb58.exe

    • Size

      334KB

    • MD5

      b90fc46ee52b60b44e0b552a310f5818

    • SHA1

      a75f11b9998886974f84822d78c6e35dbe5dc1d3

    • SHA256

      eb234ba5cceaf5c22e7d59c0d5d6cda995da1129188f47a1c44523ab94f3cb58

    • SHA512

      705c5dd2d8f0da0c0344d3b3c9df0096b333bd2b471cba5f30263bde77bcd2e8adc14049b54756dce6df5271c2ab4e5dcf889eb12689774e723d69bdf40d8c10

    • SSDEEP

      3072:IzMuGzE5XDNJmvXE6m+VUPIiXUJXKu14umGZYnqlYbUecdDMkmz93iKojUwrCTz6:IzMumMfUtcuCjQMkG98bmm2xTF2F

MITRE ATT&CK Enterprise v15

Tasks