Resubmissions

24-12-2024 12:26

241224-pmh6aaxnfm 10

24-12-2024 12:25

241224-plpxfaxnfj 10

General

  • Target

    JaffaCakes118_27bba7d49a4c139f6ab50b7335e5f7da81212e2ab6523f5cdfa03c7ab57f843b

  • Size

    889.4MB

  • Sample

    241224-plpxfaxnfj

  • MD5

    9578cb41b4519b46a66de8edc53254d6

  • SHA1

    b4f6a61ef0991b65b3f0caafe907d24cb7e46ba3

  • SHA256

    27bba7d49a4c139f6ab50b7335e5f7da81212e2ab6523f5cdfa03c7ab57f843b

  • SHA512

    114912fa967fdc056b941c9c937f108ec25b781ce1270bad69a515d62514818cb7d11a51a100d03e505b9cdc92cfa54e22934342b7ff935c92d232620f5a3cf3

  • SSDEEP

    196608:dpReULRqbyXOBJwTIKv/icGOldo7erjKZsyo5fCNHZ0XYk71SjqKf:PwE+CTpKcke/RzWGXHo

Malware Config

Extracted

Family

vidar

Version

4.1

Botnet

61265dfdf26c6add02758fe6e39ef155

C2

https://t.me/task4manager

https://t.me/boliwwwnol

http://49.13.14.63:80

http://80.85.241.165:80

https://steamcommunity.com/profiles/76561199510444991

Attributes
  • profile_id_v2

    61265dfdf26c6add02758fe6e39ef155

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 Edg/112.0.1722.34

Targets

    • Target

      JaffaCakes118_27bba7d49a4c139f6ab50b7335e5f7da81212e2ab6523f5cdfa03c7ab57f843b

    • Size

      889.4MB

    • MD5

      9578cb41b4519b46a66de8edc53254d6

    • SHA1

      b4f6a61ef0991b65b3f0caafe907d24cb7e46ba3

    • SHA256

      27bba7d49a4c139f6ab50b7335e5f7da81212e2ab6523f5cdfa03c7ab57f843b

    • SHA512

      114912fa967fdc056b941c9c937f108ec25b781ce1270bad69a515d62514818cb7d11a51a100d03e505b9cdc92cfa54e22934342b7ff935c92d232620f5a3cf3

    • SSDEEP

      196608:dpReULRqbyXOBJwTIKv/icGOldo7erjKZsyo5fCNHZ0XYk71SjqKf:PwE+CTpKcke/RzWGXHo

MITRE ATT&CK Enterprise v15

Tasks