General

  • Target

    6faa4bc0104e44cc2aa5c38d826e2f20d7a7fa6383f8fed474295b993f933834

  • Size

    176KB

  • Sample

    240417-rkk8zabd65

  • MD5

    8bbd72315745bc1f6d4391e913ce15ad

  • SHA1

    21dbaef0f68b9eaf78ef9fae3bb2d99e957e2c63

  • SHA256

    6faa4bc0104e44cc2aa5c38d826e2f20d7a7fa6383f8fed474295b993f933834

  • SHA512

    bd6b480e86d7a816d51a4abfd757c57feb9a8f04275fffe17ea8580902cdc5f7987f069a49c54803e0473f368bbec050e3d8491b88f62c8fe68d8ae6a9802c3e

  • SSDEEP

    3072:jsL0JhdBXvOgY9J7BisV3Qw/sb99xJEsAkPM56rWSdd1jxTtpcW1iW1:gL0R4g6J7BRJ2rEt556rBRBEeN

Malware Config

Extracted

Family

vidar

Version

8

Botnet

b8a5ebfe4a0abceff8d2cd1a6c6c4024

C2

https://steamcommunity.com/profiles/76561199644883218

https://t.me/neoschats

Attributes
  • profile_id_v2

    b8a5ebfe4a0abceff8d2cd1a6c6c4024

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target

      28c2e53d3c42ec59ffb971a46d10bf54f29917e9e32af1d7a76956045726c5e6.exe

    • Size

      226KB

    • MD5

      c0820a2d4e1c83bd612564dbe6a614cb

    • SHA1

      799759a1630d58dec2f03bc898deb34b90972005

    • SHA256

      28c2e53d3c42ec59ffb971a46d10bf54f29917e9e32af1d7a76956045726c5e6

    • SHA512

      34de105b76920aeaba691f69d3bacc321ff2f57f7d831b3ebc551c00e599394ccb92cadfdbc79f489824f09f5716fddddc48d67fef57153960d38bbb203cd513

    • SSDEEP

      3072:uNVZG1z1E9/n6+wLgWPHqwUSrV+oBpiPMijLt8TjXu67QUUeDULZIcnbjsq:QGl1E7NQHcKPeMijLt8TnQUhuISsq

MITRE ATT&CK Enterprise v15

Tasks