General

  • Target

    Setup.exe

  • Size

    440.4MB

  • Sample

    221204-t82xqsbf5w

  • MD5

    e5fea3a7da3ba2ca6f67da24e2f7ab3d

  • SHA1

    1b66f5803aa78c220568368fec662bb5c9ca836f

  • SHA256

    933f4db5804b2c2bbb39d9e19ca6fc8d3878f21ca1dc4c7050a4c67dcff5d403

  • SHA512

    ef942aad740afadbfa80f6b55142f498833d383f2f4dbadad5f091115cd8014b762728fd14565ceaaa1fc57997c49d268d9462b55010485a31f7064864353810

  • SSDEEP

    98304:f+GMKz9cDFxvpiVVfbbLFMOf9dQLB5RKO/0wsUiKw01T5Cp0t11C:L0Ri3bh1dKBXKW0Kibc5Cuv1C

Score
10/10

Malware Config

Extracted

Family

vidar

Version

56

Botnet

1707

C2

https://t.me/asifrazatg

https://steamcommunity.com/profiles/76561199439929669

Attributes
  • profile_id

    1707

Targets

    • Target

      Setup.exe

    • Size

      440.4MB

    • MD5

      e5fea3a7da3ba2ca6f67da24e2f7ab3d

    • SHA1

      1b66f5803aa78c220568368fec662bb5c9ca836f

    • SHA256

      933f4db5804b2c2bbb39d9e19ca6fc8d3878f21ca1dc4c7050a4c67dcff5d403

    • SHA512

      ef942aad740afadbfa80f6b55142f498833d383f2f4dbadad5f091115cd8014b762728fd14565ceaaa1fc57997c49d268d9462b55010485a31f7064864353810

    • SSDEEP

      98304:f+GMKz9cDFxvpiVVfbbLFMOf9dQLB5RKO/0wsUiKw01T5Cp0t11C:L0Ri3bh1dKBXKW0Kibc5Cuv1C

    Score
    10/10
    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks