General

  • Target

    82839b7a610f7923f282f88f241b79c66332e0d043b41f2574c776484da7957aN.exe

  • Size

    1.4MB

  • Sample

    241117-feznmasarl

  • MD5

    35bb5be7a9f9ca29e7239cc3f713b2d0

  • SHA1

    a8da6cb42cb3a8dfc5e0d2d0fc9de16f94d10932

  • SHA256

    82839b7a610f7923f282f88f241b79c66332e0d043b41f2574c776484da7957a

  • SHA512

    4c6e3d70a9b58ee5e08588eee5ef5a40d8676028d8d68fe293cb7b0b6764061f0ec5170d1d058ba90a86d09f0e33c31987c96cbd815d46441139c19896b49775

  • SSDEEP

    24576:AF3iok5nCcAT5Aw/pkPpbUAEQQi+HrFZ390w28KSaVBXecD4fvPVlFegzHLYwFvx:AFSouMByUswrXKFSxBI0W

Malware Config

Extracted

Family

vidar

Version

48.4

Botnet

869

C2

https://koyu.space/@qmashton

Attributes
  • profile_id

    869

Targets

    • Target

      82839b7a610f7923f282f88f241b79c66332e0d043b41f2574c776484da7957aN.exe

    • Size

      1.4MB

    • MD5

      35bb5be7a9f9ca29e7239cc3f713b2d0

    • SHA1

      a8da6cb42cb3a8dfc5e0d2d0fc9de16f94d10932

    • SHA256

      82839b7a610f7923f282f88f241b79c66332e0d043b41f2574c776484da7957a

    • SHA512

      4c6e3d70a9b58ee5e08588eee5ef5a40d8676028d8d68fe293cb7b0b6764061f0ec5170d1d058ba90a86d09f0e33c31987c96cbd815d46441139c19896b49775

    • SSDEEP

      24576:AF3iok5nCcAT5Aw/pkPpbUAEQQi+HrFZ390w28KSaVBXecD4fvPVlFegzHLYwFvx:AFSouMByUswrXKFSxBI0W

MITRE ATT&CK Enterprise v15

Tasks