vidar | d7c08a686196d6c28d4f79588aec7a0ca0123e35c57a9b1362e9ac0e381c176b | Triage

Submit
Reports

Overview

overview

Static

static

3

D7C08A6861...A9.exe

windows7-x64

D7C08A6861...A9.exe

windows10-2004-x64

Sharing

General

Target

D7C08A686196D6C28D4F79588AEC7A0CA0123E35C57A9.exe
Size

558KB
Sample

230601-q6gbgaee77
MD5

e91cc2e537362de1efdbcfd78cc6c662
SHA1

0537b130c780406acbb7ecfc85ce103f944f41c7
SHA256

d7c08a686196d6c28d4f79588aec7a0ca0123e35c57a9b1362e9ac0e381c176b
SHA512

25658cabfefb93ec031a7cb6837ce81028df3873f0c8191361a44c275573c77cdf038bf01b00e121e10565cf49768e45ba9442cb19f9772daaa50244b08ebd8f
SSDEEP

12288:w8V18UCk9UOjfCTBNZtZYRD8pd0yyC74awwi5fK2:rf9/+3lKDcyVG4Jwi5fn

Score

10^/10

vidar 237 stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

D7C08A686196D6C28D4F79588AEC7A0CA0123E35C57A9.exe

Resource

win7-20230220-en

vidar 237 stealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

D7C08A686196D6C28D4F79588AEC7A0CA0123E35C57A9.exe

Resource

win10v2004-20230220-en

vidar 237 stealer

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Extracted

Family

vidar

Version

9

Botnet

237

C2

http://hotticketsale.com/

Attributes

profile_id
237

Targets

- Target
  
  D7C08A686196D6C28D4F79588AEC7A0CA0123E35C57A9.exe
- Size
  
  558KB
- MD5
  
  e91cc2e537362de1efdbcfd78cc6c662
- SHA1
  
  0537b130c780406acbb7ecfc85ce103f944f41c7
- SHA256
  
  d7c08a686196d6c28d4f79588aec7a0ca0123e35c57a9b1362e9ac0e381c176b
- SHA512
  
  25658cabfefb93ec031a7cb6837ce81028df3873f0c8191361a44c275573c77cdf038bf01b00e121e10565cf49768e45ba9442cb19f9772daaa50244b08ebd8f
- SSDEEP
  
  12288:w8V18UCk9UOjfCTBNZtZYRD8pd0yyC74awwi5fK2:rf9/+3lKDcyVG4Jwi5fn
Score

10^/10

vidar 237 stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
- Vidar Stealer
  stealer
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

vidar237stealer

behavioral2

vidar237stealer

© 2018-2024

Terms | Privacy