Resubmissions

24/03/2025, 00:06

250324-adxjzszzez 10

23/03/2025, 20:32

250323-zbkj3svsc1 10

General

  • Target

    malware.7z

  • Size

    688KB

  • Sample

    250324-adxjzszzez

  • MD5

    8f96070ece15d2ac7bd98e89e8f9119b

  • SHA1

    7fa4661d75a2c40d1abe540dcc58f9fe0bba9962

  • SHA256

    fc692e62d466b316c3d0174fdbe6fa6d778e47e29b356a39d9a8f3df1e4a571d

  • SHA512

    14917b01f4083d676cdd7afde76c136c2a4fbed8d1bfad3be850b53dbb2bb3168ab26a9a8c288e203806e89efacae2f943da279636f75c11c9fb9faf22534a01

  • SSDEEP

    12288:8iOQ2snGfsgFZvXGHlaMUM5X/uOIPGzDbWoKtEnImpOPySv6eeRPPHsrmI8qzLPT:3DG0gFZfGHltDPujPqu2Pp8yVRPPAjvT

Malware Config

Extracted

Family

vidar

Version

28.3

Botnet

651

C2

http://manillamemories.com/

Attributes
  • profile_id

    651

Targets

    • Target

      0

    • Size

      449KB

    • MD5

      7b20f5c61780fe383f45ca6e18ed5a6a

    • SHA1

      bc9bfd59f0cde312cd9a0d20784887fed9b8c836

    • SHA256

      26ccbcb079b3f0cc183293351c40da3146d2ddec9b4d6cd314090cfab94834df

    • SHA512

      8a63f6ad20fe18bd49d055ae05bc81fe30d0ebfb25a37428b17b43569b53bf2560f0de8f993f62a2f5d458db78e6d24ad71fca8d7fd1133d3cb499dff356e68b

    • SSDEEP

      12288:r7fSQUrrX/pC2Hwxx/Pb1JTUPd0o7Vzl:rzynxmPrrTUPdL7VJ

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks