General

  • Target

    aebfbaf72b832cf446789cedf82459f71587f48b2d44998d64215fafaf4b5fb6

  • Size

    1.9MB

  • Sample

    220321-s7alesdec3

  • MD5

    d790fed581ba982731fc4257763d93b2

  • SHA1

    f91dbf1e6e81b266a1cfa1fe307fcd3b9d491b27

  • SHA256

    aebfbaf72b832cf446789cedf82459f71587f48b2d44998d64215fafaf4b5fb6

  • SHA512

    a207b39908c480c25c7d33b56ed6b6f6a3c16ff5624d12537bac6972a847ae7cb82736b5d52dcae25e36494e6144309101e177fde5a2c42bc23ae59dd4c150b1

Score
10/10

Malware Config

Extracted

Family

vidar

Version

50.8

Botnet

909

C2

https://ieji.de/@sam7al

https://ru.social/@s4m74l

Attributes
  • profile_id

    909

Targets

    • Target

      aebfbaf72b832cf446789cedf82459f71587f48b2d44998d64215fafaf4b5fb6

    • Size

      1.9MB

    • MD5

      d790fed581ba982731fc4257763d93b2

    • SHA1

      f91dbf1e6e81b266a1cfa1fe307fcd3b9d491b27

    • SHA256

      aebfbaf72b832cf446789cedf82459f71587f48b2d44998d64215fafaf4b5fb6

    • SHA512

      a207b39908c480c25c7d33b56ed6b6f6a3c16ff5624d12537bac6972a847ae7cb82736b5d52dcae25e36494e6144309101e177fde5a2c42bc23ae59dd4c150b1

    Score
    10/10
    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Vidar Stealer

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks