Overview

overview

10

Static

static

1

JaffaCakes...34.exe

windows7-x64

10

JaffaCakes...34.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_82c95e7ea7c76f35ab515f630540d289455d024c697c310521edc0c2e1a3a634

  • Size

    761.7MB

  • Sample

    241222-pe7tnsxngv

  • MD5

    dc8aca7a76c9901c3c16616fd3115625

  • SHA1

    c2e98cce6983d5125ee3e946958e60f6ea437b66

  • SHA256

    82c95e7ea7c76f35ab515f630540d289455d024c697c310521edc0c2e1a3a634

  • SHA512

    b020ed5c2ed2dfa1024783088756f9b969be4656250de06d7f0dd4df8ee609bc15e806a9c10921d3664d73196d99fd58062f6ea26c71f04fe02acce17819b0dc

  • SSDEEP

    12288:RYN1mDZQFOqdokKxqmIn0FGna9WhSKv8VW6ZtN4:2NVFpdD9DhSKTy4

Score
10/10
vidar3d5420e6700c4c0995931c588ae1484cdiscoverystealer

Malware Config

Extracted

Family

vidar

Version

3.9

Botnet

3d5420e6700c4c0995931c588ae1484c

C2

https://steamcommunity.com/profiles/76561199263069598

https://t.me/cybehost
Attributes
  • profile_id_v2

    3d5420e6700c4c0995931c588ae1484c

  • user_agent

    Mozilla/5.0 (compatible; Konqueror/3.5; Linux) KHTML/3.5.7 (like Gecko) (Debian)

Targets

    • Target

      JaffaCakes118_82c95e7ea7c76f35ab515f630540d289455d024c697c310521edc0c2e1a3a634

    • Size

      761.7MB

    • MD5

      dc8aca7a76c9901c3c16616fd3115625

    • SHA1

      c2e98cce6983d5125ee3e946958e60f6ea437b66

    • SHA256

      82c95e7ea7c76f35ab515f630540d289455d024c697c310521edc0c2e1a3a634

    • SHA512

      b020ed5c2ed2dfa1024783088756f9b969be4656250de06d7f0dd4df8ee609bc15e806a9c10921d3664d73196d99fd58062f6ea26c71f04fe02acce17819b0dc

    • SSDEEP

      12288:RYN1mDZQFOqdokKxqmIn0FGna9WhSKv8VW6ZtN4:2NVFpdD9DhSKTy4

    Score
    10/10
    vidar3d5420e6700c4c0995931c588ae1484cdiscoverystealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Vidar family

      vidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks