Overview

overview

10

Static

static

1

JaffaCakes...bf.exe

windows7-x64

10

JaffaCakes...bf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_018669b27ab8ca6e5574c85b5af2ba1ed9826eb3dd8c56c638d78dd73f5eb6bf

  • Size

    690.9MB

  • Sample

    241224-q496rsyqak

  • MD5

    cb03d863a7958db81ea4723301c14707

  • SHA1

    59009abe1e56ff8e544bdb4d1a308fd419b92aaa

  • SHA256

    018669b27ab8ca6e5574c85b5af2ba1ed9826eb3dd8c56c638d78dd73f5eb6bf

  • SHA512

    abd79bf1d165b22c3f1e5d1c9c1ee18209da23b9fce20111ce09343148e1cd0904803d9753326ff8f896964f453bb711154aede897d777f917e89644f66ce8b4

  • SSDEEP

    196608:9R7vMh2LYWulUF4IXS8t3KzRo8DL+08rjEHCRQqRoI1CROP1x:jvTc4toRt+0A4iRNAM

Score
10/10
vidar649discoverystealer

Malware Config

Extracted

Family

vidar

Version

2.5

Botnet

649

C2

https://t.me/noktasina

https://steamcommunity.com/profiles/76561199478503353

http://95.217.152.87:80
Attributes
  • profile_id

    649

  • user_agent

    Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.0.0 Safari/537.36

Targets

    • Target

      JaffaCakes118_018669b27ab8ca6e5574c85b5af2ba1ed9826eb3dd8c56c638d78dd73f5eb6bf

    • Size

      690.9MB

    • MD5

      cb03d863a7958db81ea4723301c14707

    • SHA1

      59009abe1e56ff8e544bdb4d1a308fd419b92aaa

    • SHA256

      018669b27ab8ca6e5574c85b5af2ba1ed9826eb3dd8c56c638d78dd73f5eb6bf

    • SHA512

      abd79bf1d165b22c3f1e5d1c9c1ee18209da23b9fce20111ce09343148e1cd0904803d9753326ff8f896964f453bb711154aede897d777f917e89644f66ce8b4

    • SSDEEP

      196608:9R7vMh2LYWulUF4IXS8t3KzRo8DL+08rjEHCRQqRoI1CROP1x:jvTc4toRt+0A4iRNAM

    Score
    10/10
    vidar649discoverystealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks