General

  • Target

    bc56000b4f584d0cc36122505495abef253867fafa8f1d852e5047b0937c93ea

  • Size

    161KB

  • Sample

    240417-rk6jxach5w

  • MD5

    f28c7392342ec4c4f28791ac14185f17

  • SHA1

    026e2f60c4f5149e5b6b2be01c1d43681c8157e6

  • SHA256

    bc56000b4f584d0cc36122505495abef253867fafa8f1d852e5047b0937c93ea

  • SHA512

    8ce73663d8206eca5c0647ab9ae2218911c5e696ae2a48101b6d896ec453478858324dab221ba5f548f256001b810262d674565150fdfbf90fed7ebe924ee969

  • SSDEEP

    3072:jFPZBvteSomhR3WAEIm3nYCjrd/jprrqHnRDfvy468idV5YZux:RBBvtU0lEIm3nrjrlUHR5610Z0

Malware Config

Extracted

Family

vidar

Version

8

Botnet

438c7562661d92141bb0adbe01c2fc5f

C2

https://steamcommunity.com/profiles/76561199644883218

https://t.me/neoschats

Attributes
  • profile_id_v2

    438c7562661d92141bb0adbe01c2fc5f

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target

      0e8fbee0bc9bf2582c73dbb5c0e58abdeaecb7689f51bf16e888604e329aae6c.exe

    • Size

      211KB

    • MD5

      77badd4fd610c2abc079680ca6661f18

    • SHA1

      9d2e4875e509dccf60705a5baf666c4c4a7616d7

    • SHA256

      0e8fbee0bc9bf2582c73dbb5c0e58abdeaecb7689f51bf16e888604e329aae6c

    • SHA512

      7b06fd9db9fe6f637ab50671744172d749b75eadfa5707d25e6c9d0a7adae49ffbe922f582e2f1816d683f1b8a4b0717fc4a10234c7147e4a6e84d6be03ff242

    • SSDEEP

      3072:u8i3u+X+RbpTL/iD37WiZ9pi6Ry9x+5fLUn7TzDPaVYoE:w3u+uRlTrc75i6Ryf+BLUnPzb

MITRE ATT&CK Matrix

Tasks