General

  • Target

    6d6169ffdba934568fd161267de991959a2cd299dd95a789a1188268f9d79d6a

  • Size

    255KB

  • Sample

    240429-fg7f9abc3w

  • MD5

    22842b0ac4338991b905a5a14397b61d

  • SHA1

    8bb0de043e1802907e92503d20dfd7e968fbbfa1

  • SHA256

    6d6169ffdba934568fd161267de991959a2cd299dd95a789a1188268f9d79d6a

  • SHA512

    61b7c4d223d7a30e9d4be28c0a48030ced0b6738c75d8d62e9f08a7b0405013887154e90a32d7bba2cb2bab4df849c65e9bc5cbd221a615e4b8d8ee5b1651900

  • SSDEEP

    3072:vdeWhkt1BToT7DZkA5/osMyrB4nzmQS+k8DIiMsi8ORj4yuTBXwA/65+thrS:FM1RoT7DlXQlk8DIwJOTEB7thr

Malware Config

Extracted

Family

vidar

Version

8

Botnet

438c7562661d92141bb0adbe01c2fc5f

C2

https://steamcommunity.com/profiles/76561199644883218

https://t.me/neoschats

Attributes
  • profile_id_v2

    438c7562661d92141bb0adbe01c2fc5f

  • user_agent

    Mozilla/5.0 (Linux; Android 11; M2102J20SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Mobile Safari/537.36 EdgA/97.0.1072.78

Targets

    • Target

      6d6169ffdba934568fd161267de991959a2cd299dd95a789a1188268f9d79d6a

    • Size

      255KB

    • MD5

      22842b0ac4338991b905a5a14397b61d

    • SHA1

      8bb0de043e1802907e92503d20dfd7e968fbbfa1

    • SHA256

      6d6169ffdba934568fd161267de991959a2cd299dd95a789a1188268f9d79d6a

    • SHA512

      61b7c4d223d7a30e9d4be28c0a48030ced0b6738c75d8d62e9f08a7b0405013887154e90a32d7bba2cb2bab4df849c65e9bc5cbd221a615e4b8d8ee5b1651900

    • SSDEEP

      3072:vdeWhkt1BToT7DZkA5/osMyrB4nzmQS+k8DIiMsi8ORj4yuTBXwA/65+thrS:FM1RoT7DlXQlk8DIwJOTEB7thr

MITRE ATT&CK Matrix

Tasks