General

  • Target

    943870a8fa6b12305e86ece6e3c5625ead0771c91bfe8d666beb026ecb4899ec

  • Size

    185KB

  • Sample

    240417-qqnqlsba5y

  • MD5

    fc80f9ef0d574a117c858b49141fd749

  • SHA1

    bd2ff87c929c24fc53d683c41cbdf90202a75f1e

  • SHA256

    943870a8fa6b12305e86ece6e3c5625ead0771c91bfe8d666beb026ecb4899ec

  • SHA512

    d91847354c43226840bdc1ef6d4b5cfa46bee4e7105e9ad4d21ddd4b8cdfc3212f90b754874efe6a24c52164ecee9767cfcef1a2953902c4371012dcbeca8cde

  • SSDEEP

    3072:DEwtf+qxF9YvcnY+xtKCS5//ojfBiQoOo3RmdJkNbNhB7jZBUm0kvlO5zxVOOAnm:jWGY0YEtbAARe3RmPibN3ZJvl8x0OAf+

Malware Config

Extracted

Family

vidar

Version

8

Botnet

438c7562661d92141bb0adbe01c2fc5f

C2

https://steamcommunity.com/profiles/76561199644883218

https://t.me/neoschats

Attributes
  • profile_id_v2

    438c7562661d92141bb0adbe01c2fc5f

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target

      523beeb57c19076e7177e7a016bab52ff21ac5ecbbbafd0b8dc5c8dc5b9d5cc1.exe

    • Size

      303KB

    • MD5

      7ee46544312f9217a04c6ecae3c637b2

    • SHA1

      cb6332410c4d37dd6ce9929cc93adaaeff19ab20

    • SHA256

      523beeb57c19076e7177e7a016bab52ff21ac5ecbbbafd0b8dc5c8dc5b9d5cc1

    • SHA512

      4cfc93c28678f60dba4c143708dd2a25588dfa878fac2630ec80ab5644178bdc7ea7b39173f739e808890da9c5696e5175f77907ba1da0654a6e126660d91c68

    • SSDEEP

      3072:kL6X++3PKOpTpbpav1zakS5Miid0IoPmDj5dzx1U1PB3/EyXW/Q5dTTkW0/V9:c6tPKOxpg9W5MKIoP2dk1PuyScTT90

MITRE ATT&CK Matrix

Tasks