General

  • Target

    38b34e3b4ebe93cf20eef8a50f10a2e9.exe

  • Size

    6.5MB

  • Sample

    230328-halx3sbb6y

  • MD5

    df9611d635ed2c74f4674dd545ede566

  • SHA1

    c0e75614c2e0ea333ae1b35ebdc188c584aebd32

  • SHA256

    6b3b2aec308683a35d96f1e991c03ca07703590855e04735f5f0ccf0728eb840

  • SHA512

    82227b45d88cfe9b8316fa5660945b5175469a1af26e4944e3867797faf377ce6e660843cbc750b1c6b1af00c3b70de4ae9f30def3eb0405e26ac2cd2356bd11

  • SSDEEP

    196608:DhhUHn/OWz19WvhujZlxkf70yarD3kJQ:l+n/Ow9eeZTkfnGD3ka

Score
10/10

Malware Config

Extracted

Family

vidar

Version

54.9

Botnet

1134

C2

https://t.me/larsenup

https://ioc.exchange/@zebra54

http://5.161.120.43:80

Attributes
  • profile_id

    1134

Targets

    • Target

      38b34e3b4ebe93cf20eef8a50f10a2e9.exe

    • Size

      6.5MB

    • MD5

      df9611d635ed2c74f4674dd545ede566

    • SHA1

      c0e75614c2e0ea333ae1b35ebdc188c584aebd32

    • SHA256

      6b3b2aec308683a35d96f1e991c03ca07703590855e04735f5f0ccf0728eb840

    • SHA512

      82227b45d88cfe9b8316fa5660945b5175469a1af26e4944e3867797faf377ce6e660843cbc750b1c6b1af00c3b70de4ae9f30def3eb0405e26ac2cd2356bd11

    • SSDEEP

      196608:DhhUHn/OWz19WvhujZlxkf70yarD3kJQ:l+n/Ow9eeZTkfnGD3ka

    Score
    10/10
    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Enterprise v6

Tasks