Overview

overview

10

Static

static

3

build.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    build.exe

  • Size

    315KB

  • Sample

    230918-l7ndysgf21

  • MD5

    d08fb132524e824ca66d315b6fb23ea1

  • SHA1

    85d6aae899ae56b45a493d6a65edb460d70f75f2

  • SHA256

    5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97

  • SHA512

    266e78d04fab571a36fc97946736c2c96721344c33d28699d13a5f9fb2b8673229acbb20d3a8ece1e17dfae4c06fa6fc2360e15da2cdc0003eae3d6b7fdf475c

  • SSDEEP

    6144:4lJ8wtt/Lod5A0mehi5DGWpmpvcX2Dp7M6Py3OXBjBPTE:43bMbA3SiEbvcX2Dp7V63ORlb

Score
10/10
vidare881aaf79bbebc43874722496eacba76discoveryspywarestealer

Malware Config

Extracted

Family

vidar

Version

5.6

Botnet

e881aaf79bbebc43874722496eacba76

C2

https://steamcommunity.com/profiles/76561199550790047

https://t.me/bonoboaz
Attributes
  • profile_id_v2

    e881aaf79bbebc43874722496eacba76

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 OPR/103.0.0.0

Targets

    • Target

      build.exe

    • Size

      315KB

    • MD5

      d08fb132524e824ca66d315b6fb23ea1

    • SHA1

      85d6aae899ae56b45a493d6a65edb460d70f75f2

    • SHA256

      5b4bced547eb17aa796a64c58e89f9d96e56edab6596e02ec13801bf5d452b97

    • SHA512

      266e78d04fab571a36fc97946736c2c96721344c33d28699d13a5f9fb2b8673229acbb20d3a8ece1e17dfae4c06fa6fc2360e15da2cdc0003eae3d6b7fdf475c

    • SSDEEP

      6144:4lJ8wtt/Lod5A0mehi5DGWpmpvcX2Dp7M6Py3OXBjBPTE:43bMbA3SiEbvcX2Dp7V63ORlb

    Score
    10/10
    vidare881aaf79bbebc43874722496eacba76discoveryspywarestealer

    • Detects win.vidar.

      Detects Vidar Stealer based on yara-signator.

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks