General

  • Target

    JaffaCakes118_5f27f523a0f2c8c2d33269d022d86bfc5bf4ed7e7ae6114510501b7bfa415eef

  • Size

    650.3MB

  • Sample

    241222-jpg34szpbm

  • MD5

    065a86eb042cd336e2b8ac06d275bd2f

  • SHA1

    3e0d833ea2d11befdbfe52beab208bd475e8f617

  • SHA256

    5f27f523a0f2c8c2d33269d022d86bfc5bf4ed7e7ae6114510501b7bfa415eef

  • SHA512

    aeb655413ccc0fa802acdaf764211a91f53853d1488db5743f361e796214fabc184b426f56338536d88f26a8dbaf2095db1448c42c56fa905d5d4ace6e7bcb93

  • SSDEEP

    6144:pyyiGhfl+d6sYnm/qKHG21/ANHdPmue0nYcTsq:pyy7fl+dbYnm41xk/0nYkH

Malware Config

Extracted

Family

vidar

Version

6

Botnet

89a9873924ec1ffd63a3e6260c148bb6

C2

https://steamcommunity.com/profiles/76561199560322242

https://t.me/cahalgo

Attributes
  • profile_id_v2

    89a9873924ec1ffd63a3e6260c148bb6

  • user_agent

    Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 uacq

Targets

    • Target

      JaffaCakes118_5f27f523a0f2c8c2d33269d022d86bfc5bf4ed7e7ae6114510501b7bfa415eef

    • Size

      650.3MB

    • MD5

      065a86eb042cd336e2b8ac06d275bd2f

    • SHA1

      3e0d833ea2d11befdbfe52beab208bd475e8f617

    • SHA256

      5f27f523a0f2c8c2d33269d022d86bfc5bf4ed7e7ae6114510501b7bfa415eef

    • SHA512

      aeb655413ccc0fa802acdaf764211a91f53853d1488db5743f361e796214fabc184b426f56338536d88f26a8dbaf2095db1448c42c56fa905d5d4ace6e7bcb93

    • SSDEEP

      6144:pyyiGhfl+d6sYnm/qKHG21/ANHdPmue0nYcTsq:pyy7fl+dbYnm41xk/0nYkH

MITRE ATT&CK Enterprise v15

Tasks