General

  • Target

    f7fd4791be2e2624b7fbb1d91ab2f539.bin

  • Size

    285KB

  • Sample

    230328-c51rtsgf39

  • MD5

    80076b338de66a17e79ef14c02f81606

  • SHA1

    5a59ffe4f19b8335a660e47018e1796a7e5d3289

  • SHA256

    c2529ee8763efcc48deaa73b061105691d07eeb9b4d0a9764542de0122b1eeac

  • SHA512

    e44f1d3c5fc3c0f4b5d6e12b942d212d3a3284f5ef90d98e74561a0b37bc07aa8e7da503e76cc02233c613e1065c5d1a3464b98b90be6f3a01c878996d42e87d

  • SSDEEP

    6144:DNJ5oIGRZm7HUvroq1yRz/7beix71Mu8h7WwnGzJE7GZ1JTgGQZBfa26:Dn5wZS08SyRHx5MuY6KGS7GHJTgxw

Malware Config

Extracted

Family

vidar

Version

3

Botnet

e37abeff0df24a473dacaf8467d6fa48

C2

https://t.me/zaskullz

https://steamcommunity.com/profiles/76561199486572327

http://135.181.87.234:80

Attributes
  • profile_id_v2

    e37abeff0df24a473dacaf8467d6fa48

Targets

    • Target

      be82beca4c46e17fb1d4e7f23cf028f61b0d6e64d39146f31f1e7072ecf95fbe.exe

    • Size

      1024KB

    • MD5

      f7fd4791be2e2624b7fbb1d91ab2f539

    • SHA1

      5e293bd82fc478a0891a092e02a7576d6a9799d9

    • SHA256

      be82beca4c46e17fb1d4e7f23cf028f61b0d6e64d39146f31f1e7072ecf95fbe

    • SHA512

      340d18119fe408976e06e78ab8fa44c900981b25025389e6da674d662945986456d6ed98ffc7a478ff9583b147cb77a4df339e6e4b9734952c69693e53e20882

    • SSDEEP

      6144:7GZnGSyQWFr8FG6d68UeCVMlVTgjwAaTJVM0ASpk4hHsbPZ0kuydk3CKxh4:aXy7YKxeCVgxJA0ASp2tA

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Matrix

Tasks