Overview

overview

10

Static

static

3

JaffaCakes...74.exe

windows7-x64

10

JaffaCakes...74.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_d746506335d445d87970b4b525c066135cb0615dd598e607b36c02a1f1c58174

  • Size

    694.2MB

  • Sample

    241226-v33grasmcy

  • MD5

    12e9e95ea334803c7547758138afb02c

  • SHA1

    08e2363afc338ca68a109a9f557666778e03e1d0

  • SHA256

    d746506335d445d87970b4b525c066135cb0615dd598e607b36c02a1f1c58174

  • SHA512

    d061c064ea6c410b07e00e236d547634fd2ac9e40808b70d222a5399e9068b6e087df5b37547ae56b899468279c9e0c4572f4d313e87fc32f338bd9d1ae9308b

  • SSDEEP

    6144:YdeB1WJWxwgMrXye7ERbQX5YoJpClWWNiqZNpjpr3EomXGnPvt8Azc/Ggrni1tUc:YdjJW2LpCXiqTp6om8iOc5L4tI

Score
10/10
vidar794discoverystealer

Malware Config

Extracted

Family

vidar

Version

2.1

Botnet

794

C2

https://t.me/jetbim

https://steamcommunity.com/profiles/76561199471266194

http://65.21.58.6:80
Attributes
  • profile_id

    794

Targets

    • Target

      JaffaCakes118_d746506335d445d87970b4b525c066135cb0615dd598e607b36c02a1f1c58174

    • Size

      694.2MB

    • MD5

      12e9e95ea334803c7547758138afb02c

    • SHA1

      08e2363afc338ca68a109a9f557666778e03e1d0

    • SHA256

      d746506335d445d87970b4b525c066135cb0615dd598e607b36c02a1f1c58174

    • SHA512

      d061c064ea6c410b07e00e236d547634fd2ac9e40808b70d222a5399e9068b6e087df5b37547ae56b899468279c9e0c4572f4d313e87fc32f338bd9d1ae9308b

    • SSDEEP

      6144:YdeB1WJWxwgMrXye7ERbQX5YoJpClWWNiqZNpjpr3EomXGnPvt8Azc/Ggrni1tUc:YdjJW2LpCXiqTp6om8iOc5L4tI

    Score
    10/10
    vidar794discoverystealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks