General

  • Target

    04ef7c15474c013ee25e2a444c4ba3c83676e716675935d6871aadb08bc2848d

  • Size

    160KB

  • Sample

    240417-rjqr3acg7z

  • MD5

    ead4cd220b5d557e6c487caae90c2a23

  • SHA1

    a07b4508a74a2fda9eccf4bb172e7dd7b26bf15a

  • SHA256

    04ef7c15474c013ee25e2a444c4ba3c83676e716675935d6871aadb08bc2848d

  • SHA512

    c9b58c14bb1dde87ec4971c8188d649a4325347bef09280b9f35b56620fed61351e0a689fac9ef9e7cfe95d40881a37907d794fa273fd5989d667c23ed254380

  • SSDEEP

    3072:DSs6cSlu15/Urb/Lp+iUYBwEiWBPampZrNjNhbnqqw5L3MrbcqdelV:+zcSlukJBZBSmpJdq9sbc37

Malware Config

Extracted

Family

vidar

Version

8

Botnet

438c7562661d92141bb0adbe01c2fc5f

C2

https://steamcommunity.com/profiles/76561199644883218

https://t.me/neoschats

Attributes
  • profile_id_v2

    438c7562661d92141bb0adbe01c2fc5f

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target

      a6f08a3f8e1a8c2bbc982aaa662992c1d7400443e474f622d682d38ed7148d6c.exe

    • Size

      210KB

    • MD5

      57359f1a71b3c9f2e76631a70fc99aaf

    • SHA1

      8f11248f7e18e8196d1bad3b00d17d22149ecf05

    • SHA256

      a6f08a3f8e1a8c2bbc982aaa662992c1d7400443e474f622d682d38ed7148d6c

    • SHA512

      feda82b26dd483e9b6f1c4be35b23d4c011dbe3403f39beb4368fe62d07d4f2b16f80546ef49597766b1e86f8a03076efcab8f7b5cdf51b087a91e56a95754f3

    • SSDEEP

      3072:uDineOw9UM7uGMjlXSDDG17S+/uD/jrumkLa7rIzHInk2Sv1fo:rneOGUrlyG12qQ/MzoVm

MITRE ATT&CK Matrix

Tasks