General

  • Target

    JaffaCakes118_641be2c98b6b46e8dacf34789090afd6

  • Size

    3.2MB

  • Sample

    250102-lesg7svrhz

  • MD5

    641be2c98b6b46e8dacf34789090afd6

  • SHA1

    bc02cf5282fa75a16d6dcdd71a23c1b40eb28ceb

  • SHA256

    76b7e0265f5fd3d3fead08df85a41d4fac0ab5bd881f9c44dca6987e69c9b63c

  • SHA512

    4021a1eeb5ede536ce6910370debe9f9e4a0a4e2321f3fe72cea7e965571c723715e7bdfd5e6dde71a9b775ad4a9311b6d2cec95c23050673a6a9324d05e184e

  • SSDEEP

    49152:PlJnEIeGH3xSdKa+jDLWa2oRvxlqdsY5M09odfWzFM3Hx1:P/n/H3xqK5jDLWarxOsY5M5dPR

Malware Config

Extracted

Family

vidar

Version

41.5

Botnet

1045

C2

https://mas.to/@xeroxxx

Attributes
  • profile_id

    1045

Targets

    • Target

      JaffaCakes118_641be2c98b6b46e8dacf34789090afd6

    • Size

      3.2MB

    • MD5

      641be2c98b6b46e8dacf34789090afd6

    • SHA1

      bc02cf5282fa75a16d6dcdd71a23c1b40eb28ceb

    • SHA256

      76b7e0265f5fd3d3fead08df85a41d4fac0ab5bd881f9c44dca6987e69c9b63c

    • SHA512

      4021a1eeb5ede536ce6910370debe9f9e4a0a4e2321f3fe72cea7e965571c723715e7bdfd5e6dde71a9b775ad4a9311b6d2cec95c23050673a6a9324d05e184e

    • SSDEEP

      49152:PlJnEIeGH3xSdKa+jDLWa2oRvxlqdsY5M09odfWzFM3Hx1:P/n/H3xqK5jDLWarxOsY5M5dPR

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Vidar family

    • Vidar Stealer

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks