General

  • Target

    JaffaCakes118_0f58e090eba26a9b68b32fce2707edd099d91910d11f0f3f418d1c8d17552eec

  • Size

    783.9MB

  • Sample

    241223-st4x4stjfx

  • MD5

    f8fdd74996307b2128358599a136278c

  • SHA1

    29ef39af373cffc14cb782e7af9facdcd3940f11

  • SHA256

    0f58e090eba26a9b68b32fce2707edd099d91910d11f0f3f418d1c8d17552eec

  • SHA512

    abe94ce02679762a911b64880a0900a7f215454bf8095aa8145f7017de67f89e291b9c0c412c4e04447f452328cdd6b39485d3a2ecffa4a62e0c27db91655595

  • SSDEEP

    98304:BFpdUaQmYqy3Zij/gBnBRuLXUVZcHiFErO/sfw7hi0SUKULthd7IbhuvkmysId:BFrcmbKznicZKSKw7huUpDMb8vJs

Malware Config

Extracted

Family

vidar

Version

5.5

Botnet

19deda8dd4b1adc482eca7fd872a2bd2

C2

https://steamcommunity.com/profiles/76561199548518734

http://80.85.241.108:80

https://t.me/booliiksws

https://t.me/macstoc

Attributes
  • profile_id_v2

    19deda8dd4b1adc482eca7fd872a2bd2

Targets

    • Target

      JaffaCakes118_0f58e090eba26a9b68b32fce2707edd099d91910d11f0f3f418d1c8d17552eec

    • Size

      783.9MB

    • MD5

      f8fdd74996307b2128358599a136278c

    • SHA1

      29ef39af373cffc14cb782e7af9facdcd3940f11

    • SHA256

      0f58e090eba26a9b68b32fce2707edd099d91910d11f0f3f418d1c8d17552eec

    • SHA512

      abe94ce02679762a911b64880a0900a7f215454bf8095aa8145f7017de67f89e291b9c0c412c4e04447f452328cdd6b39485d3a2ecffa4a62e0c27db91655595

    • SSDEEP

      98304:BFpdUaQmYqy3Zij/gBnBRuLXUVZcHiFErO/sfw7hi0SUKULthd7IbhuvkmysId:BFrcmbKznicZKSKw7huUpDMb8vJs

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Vidar family

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks