Overview

overview

10

Static

static

3

eba54509db...54.exe

windows7-x64

10

eba54509db...54.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eba54509dbe102fec092fd16b24a0664237e3405b24c12b6fec4900d28b43654.bin

  • Size

    465KB

  • Sample

    230501-xpawpaeg34

  • MD5

    be1a251fe8067b806a5381054e21b185

  • SHA1

    bcd982dc14b9865ddf81b610d5979f965e5cc70f

  • SHA256

    eba54509dbe102fec092fd16b24a0664237e3405b24c12b6fec4900d28b43654

  • SHA512

    969c176e41a115f824062397d7d0640f161c1c9f7782dfc91be979334c37856833df4c11f4661b5cce671ad1becf24def7d38046c79eec43c50954198b26ad81

  • SSDEEP

    12288:gxTuJ764j7Y3Ixl7Kjnc43V5a6Ku1z2RR:gNsr7RinlLLKuz2RR

Score
10/10
vidar78489afd9d9a4747beb445e5fb5b9c96stealer

Malware Config

Extracted

Family

vidar

Version

3.6

Botnet

78489afd9d9a4747beb445e5fb5b9c96

C2

https://steamcommunity.com/profiles/76561199499188534

https://t.me/nutalse
Attributes
  • profile_id_v2

    78489afd9d9a4747beb445e5fb5b9c96

  • user_agent

    Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36

Targets

    • Target

      eba54509dbe102fec092fd16b24a0664237e3405b24c12b6fec4900d28b43654.bin

    • Size

      465KB

    • MD5

      be1a251fe8067b806a5381054e21b185

    • SHA1

      bcd982dc14b9865ddf81b610d5979f965e5cc70f

    • SHA256

      eba54509dbe102fec092fd16b24a0664237e3405b24c12b6fec4900d28b43654

    • SHA512

      969c176e41a115f824062397d7d0640f161c1c9f7782dfc91be979334c37856833df4c11f4661b5cce671ad1becf24def7d38046c79eec43c50954198b26ad81

    • SSDEEP

      12288:gxTuJ764j7Y3Ixl7Kjnc43V5a6Ku1z2RR:gNsr7RinlLLKuz2RR

    Score
    10/10
    vidar78489afd9d9a4747beb445e5fb5b9c96stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks