Resubmissions

18/01/2023, 14:08

230118-rfz7bsae2210

16/12/2022, 12:38

221216-pvfecsef977

General

  • Target
    BraveBrowserSetup.iso
  • Size 309.7MB
  • Sample230118-rfz7bsae22
  • SHA256 0b1a0881946f6e4d8b4af01f6bceb0737fc58282d098ae1c36c25c24c53a7deb
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • vidar

Version
  • 56.2

Botnet
  • 1853

C2
  • https://t.me/+nxuZybmPtR01ZmE0

Attributes
  • profile_id

    1853

Targets

    • Target
      BraveBrowserSetup.exe
    • Size 309.1MB
    • SHA256 bd06228669802c5ee2f00c900dd17efd1763780b17f05346d5ddcf6ead24297b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks