Description
Vidar is an infostealer based on Arkei stealer.
317e6d0c61edc2d145f8f29a19e1ecee049f6f3cff8decd0f5d8171ab99f9813
General
Target
Size
Sample
317e6d0c61edc2d145f8f29a19e1ecee049f6f3cff8decd0f5d8171ab99f9813
640KB
220215-rvjswsfhd6
Score
10 /10
MD5
SHA1
SHA256
SHA512
81843d9c10e65eeead6650766ba18d08
618f493341aea26dc4d7c46dae854d5c1d56bcbf
317e6d0c61edc2d145f8f29a19e1ecee049f6f3cff8decd0f5d8171ab99f9813
89a75dcb396ab86a4bb495ed14176b2f0a7b31949fbba02e8cdcb04967595269048dd95683391e16cd431c235ff90d5a62e616ac997cb9f983a7f358dc3dab63
Malware Config
Extracted
| Family | vidar |
| Version | 41.6 |
| Botnet | 937 |
| C2 |
https://mas.to/@lilocc |
| Attributes |
profile_id 937 |
Targets
Target
MD5
Filesize
317e6d0c61edc2d145f8f29a19e1ecee049f6f3cff8decd0f5d8171ab99f9813
81843d9c10e65eeead6650766ba18d08
640KB
Score
10/10
SHA1
SHA256
SHA512
618f493341aea26dc4d7c46dae854d5c1d56bcbf
317e6d0c61edc2d145f8f29a19e1ecee049f6f3cff8decd0f5d8171ab99f9813
89a75dcb396ab86a4bb495ed14176b2f0a7b31949fbba02e8cdcb04967595269048dd95683391e16cd431c235ff90d5a62e616ac997cb9f983a7f358dc3dab63
Tags
Signatures
-
Suspicious use of NtCreateProcessExOtherParentProcess
-
Vidar
-
Vidar Stealer
Tags
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks