General

  • Target

    f396d6f2312a827c32755100064646c03695ffb28ba3d9d71bfc488ad75ad5fc

  • Size

    267KB

  • Sample

    240429-ep8tlshf94

  • MD5

    f86d84951531f9ded0349096c2d4fb9a

  • SHA1

    19a66af61751967474651e12bc783fdea728a106

  • SHA256

    f396d6f2312a827c32755100064646c03695ffb28ba3d9d71bfc488ad75ad5fc

  • SHA512

    50040dcbbb155b7f9551634a93eff9ebca23b27a306a757147eb516fc4e4f11b1611debaa3e5107e437bc5df9d1d77d840c9f4dea8f4a674037d8bc1efd3f485

  • SSDEEP

    3072:rEWlDIX2EmU3WSs8wChTgmui99Mo8XEUnPgfnJSZBLiTNouInRp5/4:hEOSFw+ZzJUneSZGOp

Malware Config

Extracted

Family

vidar

Version

7.9

Botnet

64928583ce0228f6ec22bfb02c3b79a8

C2

https://t.me/hypergog

https://steamcommunity.com/profiles/76561199642171824

Attributes
  • profile_id_v2

    64928583ce0228f6ec22bfb02c3b79a8

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36

Targets

    • Target

      f396d6f2312a827c32755100064646c03695ffb28ba3d9d71bfc488ad75ad5fc

    • Size

      267KB

    • MD5

      f86d84951531f9ded0349096c2d4fb9a

    • SHA1

      19a66af61751967474651e12bc783fdea728a106

    • SHA256

      f396d6f2312a827c32755100064646c03695ffb28ba3d9d71bfc488ad75ad5fc

    • SHA512

      50040dcbbb155b7f9551634a93eff9ebca23b27a306a757147eb516fc4e4f11b1611debaa3e5107e437bc5df9d1d77d840c9f4dea8f4a674037d8bc1efd3f485

    • SSDEEP

      3072:rEWlDIX2EmU3WSs8wChTgmui99Mo8XEUnPgfnJSZBLiTNouInRp5/4:hEOSFw+ZzJUneSZGOp

MITRE ATT&CK Matrix

Tasks