vidar | 1b9753aaaf8e3e93be025dc3af836027c391516b1866e7064b6e0743ed72c651 | Triage

Analysis

max time kernel
111s
max time network
160s
platform
windows10_x64
resource
win10-en-20211208
submitted
03-03-2022 11:12

Sharing

Report Analysis Logs

General

Target

1b9753aaaf8e3e93be025dc3af836027c391516b1866e7064b6e0743ed72c651.exe
Size

694KB
MD5

07558d3be84825a9b66ae9099d4d421b
SHA1

077540d4babd49925c86fa51859f97522f2898ff
SHA256

1b9753aaaf8e3e93be025dc3af836027c391516b1866e7064b6e0743ed72c651
SHA512

65d4f00c4b47f2d2586c00b61fcbb1a44cce75574043a8ac1b0ffab7369a169c89bbb2c1f5b416239c0d7376cb1a02becabc497c37922964b833fccb59c44fbd

Score

10^/10

vidar 565 stealer

Malware Config

Extracted

Family

vidar

Version

50.1

Botnet

565

C2

https://mastodon.online/@k1llerniax

https://koyu.space/@k1llerni2x

Attributes

profile_id
565

Signatures

Vidar
Vidar is an infostealer based on Arkei stealer.
stealer vidar

Vidar Stealer 2 IoCs

Processes:

resource	yara_rule
behavioral1/memory/3352-117-0x00000000025D0000-0x000000000267B000-memory.dmp	family_vidar
behavioral1/memory/3352-118-0x0000000000400000-0x00000000004B0000-memory.dmp	family_vidar

C:\Users\Admin\AppData\Local\Temp\1b9753aaaf8e3e93be025dc3af836027c391516b1866e7064b6e0743ed72c651.exe
"C:\Users\Admin\AppData\Local\Temp\1b9753aaaf8e3e93be025dc3af836027c391516b1866e7064b6e0743ed72c651.exe"
1⤵
PID:3352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3352-115-0x0000000000C0A000-0x0000000000C75000-memory.dmp

Filesize
428KB

Download
memory/3352-116-0x0000000000C0A000-0x0000000000C75000-memory.dmp

Filesize
428KB

Download
memory/3352-117-0x00000000025D0000-0x000000000267B000-memory.dmp

Filesize
684KB

Download
memory/3352-118-0x0000000000400000-0x00000000004B0000-memory.dmp

Filesize
704KB

Download