General

  • Target

    d5a7465f61e58d4319edf24d5f961eee68388e85675e95394447da4ef337e496

  • Size

    181KB

  • Sample

    240417-rm7jzsbe84

  • MD5

    9d716f33f9d1eea4b06a4fafabfa2ac5

  • SHA1

    bac7e4ac3a24036622486d496c494994914ef0b3

  • SHA256

    d5a7465f61e58d4319edf24d5f961eee68388e85675e95394447da4ef337e496

  • SHA512

    09114c89f45df97af7c29b9e88137202674a515317ecd72765c4333bb5b78694d0ebb90aac8246a69aebed8373c365bdc56c68e7a7fadd12e85e08cb841f35a9

  • SSDEEP

    3072:1+nFqrYFGOO5iaQRvOnnr8ccKQR4I3CQBZDUo0HrYmOIoQH/yh2/si:qFqrV5iaQEnrP2RdXD6LY7Iok/MNi

Malware Config

Extracted

Family

vidar

Version

7.9

Botnet

64928583ce0228f6ec22bfb02c3b79a8

C2

https://t.me/hypergog

https://steamcommunity.com/profiles/76561199642171824

Attributes
  • profile_id_v2

    64928583ce0228f6ec22bfb02c3b79a8

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36

Targets

    • Target

      2adb4934d8f9333b0e5ab20c06afa5d83e5e477f09df978effcd362074b4d0b9.exe

    • Size

      275KB

    • MD5

      73f69cf667670634d5e76e4a880a8d1f

    • SHA1

      6ac8342ae2463ab979ac22d564ee508bc6f40240

    • SHA256

      2adb4934d8f9333b0e5ab20c06afa5d83e5e477f09df978effcd362074b4d0b9

    • SHA512

      484b4160e961b4759746cc2e374b146576a329e553507c179a4598bd16e1ea6a786fb5b09de5d6c60785630a31f8ba09b526d83c643ded55fda6bca64bd4e768

    • SSDEEP

      3072:aEWlDIX2EmU3WDRciGGCOqHslNn1YKny4rOWN7vDbKGIdPxIX3Iv2+57iTCejVf4:iEOdezE1TnX6UDEPxI2iTCep

MITRE ATT&CK Enterprise v15

Tasks