Overview

overview

10

Static

static

1

Loader.exe

windows7-x64

10

Loader.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Loader.rar

  • Size

    423KB

  • Sample

    230401-h777ksaa6w

  • MD5

    8af9853e0873fe2fe64b8f52a6e109a4

  • SHA1

    050b6e12ca1b130fcd80ade2e73ae9d68124c18b

  • SHA256

    aab8b8b86154f7bda5d61a60c6cf430489b5c897c1b5ee126dc87f009e465dbe

  • SHA512

    c6d7f685a201fe9e83588abba2bc22cb6a661d2e76779cc1df3691e9c7e597ee7705cf9fa3e1cde9d9415ab80d40611e9363e904aa46cc9e78046527aec0717d

  • SSDEEP

    12288:6aFW5Uvta4t148qjRUg5MyQsZI4C9gBjgPoj:6aU5Yc8x6MyJnmy

Score
10/10
vidar4c3baa65f90a66567f7db5cd8b158dfcspywarestealer

Malware Config

Extracted

Family

vidar

Version

3.2

Botnet

4c3baa65f90a66567f7db5cd8b158dfc

C2

https://steamcommunity.com/profiles/76561199482806358

https://t.me/tabootalks
Attributes
  • profile_id_v2

    4c3baa65f90a66567f7db5cd8b158dfc

  • user_agent

    Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 OPR/91.0.4516.79

Targets

    • Target

      Loader.exe

    • Size

      761.7MB

    • MD5

      52ae6b9c659050f271d0c4b3fb25156f

    • SHA1

      e033897531108cb4a64d0c21598e4e3df099aae4

    • SHA256

      eb5acb16c058eb31a409aa25af0d9fa5437293ff3b472a4820736e0c8ec3d593

    • SHA512

      d41212b6456fc597c5c5ce3ace4a0d0c46af2d75bb8f4790d3b49d7406378bd650af0bfaf75540a2e2630211838ce5cd9e74e9d7f298b8070f8083f7d7bf4d9d

    • SSDEEP

      6144:yN0Nflu62gVRZGDCKCPLmheIoFOzQfejVPhmv/qwR19FXRlWzgBJ3d7RsYDxEb:yqNflvjy8PLceIoFVyNwKwRtfWUx9sY+

    Score
    10/10
    vidar4c3baa65f90a66567f7db5cd8b158dfcstealerspyware

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Loads dropped DLL

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks