2021-08-13 Vidar IOCs

THREAT ATTRIBUTION:  VIDAR

SUBJECTS OBSERVED
PURCHASE INQUIRY - FT/UE/120821

SENDERS OBSERVED
[email protected]

VIDAR MALDOC FILE HASH
SKBM-120821.rar
86847ee4e6c8cce5e7516ac76273cb94

VIDAR PAYLOAD FILE HASH
SKBM-120821.exe
807a927252237ee6436724cbbcd05fa0

VIDAR C2
http://zau.divendesign.in/1.jpg
http://zau.divendesign.in/2.jpg
http://zau.divendesign.in/3.jpg
http://zau.divendesign.in/4.jpg
http://zau.divendesign.in/5.jpg
http://zau.divendesign.in/6.jpg
http://zau.divendesign.in/7.jpg
http://zau.divendesign.in/main.php

SUPPORTING EVIDENCE
https://app.any.run/tasks/d4077cde-93df-4aea-8ac8-35b91654bb4a/