vidar | 2f2c73a52b2c9975df2b1f9ccde2a8eb77493bc5d3e91a16d5d0eb3eb3ca9942 | Triage

Sharing

General

Target

a68b922ff99975201ed3bc5391811694.exe
Size

324KB
Sample

230109-ygys8aah7v
MD5

a68b922ff99975201ed3bc5391811694
SHA1

8945c36d4f546f44275c0e43b1fd7fa7e183a0ac
SHA256

2f2c73a52b2c9975df2b1f9ccde2a8eb77493bc5d3e91a16d5d0eb3eb3ca9942
SHA512

130827dc0633eb284e323685e733108517cd2e979bb9edbf5188ee90633606ee7938d6794cab949d4b34f0a53cdac9503946fbf3f918e1bf5bd263e8ed38252f
SSDEEP

6144:hqbwLcNzozsNnFna8If42v8NG0AwcjxYUOvNrpZJSKYik/Pzs:hHgNzozJ420NbojxV032t/D

Score

10^/10

vidar 14 stealer

Malware Config

Extracted

Family

vidar

Version

1.8

Botnet

14

C2

https://t.me/year2023start

https://steamcommunity.com/profiles/76561199467421923

Attributes

profile_id
14

Targets

- Target
  
  a68b922ff99975201ed3bc5391811694.exe
- Size
  
  324KB
- MD5
  
  a68b922ff99975201ed3bc5391811694
- SHA1
  
  8945c36d4f546f44275c0e43b1fd7fa7e183a0ac
- SHA256
  
  2f2c73a52b2c9975df2b1f9ccde2a8eb77493bc5d3e91a16d5d0eb3eb3ca9942
- SHA512
  
  130827dc0633eb284e323685e733108517cd2e979bb9edbf5188ee90633606ee7938d6794cab949d4b34f0a53cdac9503946fbf3f918e1bf5bd263e8ed38252f
- SSDEEP
  
  6144:hqbwLcNzozsNnFna8If42v8NG0AwcjxYUOvNrpZJSKYik/Pzs:hHgNzozJ420NbojxV032t/D
Score

10^/10

vidar 14 stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2