General

  • Target

    JaffaCakes118_0b80c6f49f9dc1454db0d7b4e2df19fe13f6e586613b4cec0247e2db9a7e639c

  • Size

    775.9MB

  • Sample

    241224-bb7slsxkax

  • MD5

    f691773db94d27eeeead8f6b9ffb70e9

  • SHA1

    c09d0b614b1ea7373d14ac79370db2a4c05a53b7

  • SHA256

    0b80c6f49f9dc1454db0d7b4e2df19fe13f6e586613b4cec0247e2db9a7e639c

  • SHA512

    6e6bc3e96e5cb8d2af0a7fa81ff48357c607e5b4e095e1f15a839d0cb6c010c3fe9da7587a69703070b174b4c59d382cb7ef67d06a53b1e975f825819bcf1276

  • SSDEEP

    25165824:/nnnnnnnnnnnnnnnnnnnnnWnnnnnnnnnnnnnnnnnnnnnWnnnm:/nnnnnnnnnnnnnnnnnnnnnWnnnnnnnnn

Malware Config

Extracted

Family

vidar

Version

5

Botnet

9c4d13eb7131cf1bfda3cac74582a7d5

C2

https://steamcommunity.com/profiles/76561199532186526

https://t.me/vookihhfd

https://t.me/booliiksws

https://t.me/versozaline

Attributes
  • profile_id_v2

    9c4d13eb7131cf1bfda3cac74582a7d5

  • user_agent

    Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0

Targets

    • Target

      JaffaCakes118_0b80c6f49f9dc1454db0d7b4e2df19fe13f6e586613b4cec0247e2db9a7e639c

    • Size

      775.9MB

    • MD5

      f691773db94d27eeeead8f6b9ffb70e9

    • SHA1

      c09d0b614b1ea7373d14ac79370db2a4c05a53b7

    • SHA256

      0b80c6f49f9dc1454db0d7b4e2df19fe13f6e586613b4cec0247e2db9a7e639c

    • SHA512

      6e6bc3e96e5cb8d2af0a7fa81ff48357c607e5b4e095e1f15a839d0cb6c010c3fe9da7587a69703070b174b4c59d382cb7ef67d06a53b1e975f825819bcf1276

    • SSDEEP

      25165824:/nnnnnnnnnnnnnnnnnnnnnWnnnnnnnnnnnnnnnnnnnnnWnnnm:/nnnnnnnnnnnnnnnnnnnnnWnnnnnnnnn

MITRE ATT&CK Enterprise v15

Tasks