General

  • Target

    JC_22151a4ebc1dacb53aa0718c44a135b5fbe5300af6c40261b362a5adcf0f5a41

  • Size

    315KB

  • Sample

    231012-sw1ngaag84

  • MD5

    c29959fba5572140a60081a224cc66fc

  • SHA1

    7d2ff7587fb25ad8fa456ce6c89ccbf0befdb4d7

  • SHA256

    22151a4ebc1dacb53aa0718c44a135b5fbe5300af6c40261b362a5adcf0f5a41

  • SHA512

    d089e9e7fb1b4e8e8f6ede69dc6a45cb6183b35b977f9bc540853e95b80958226b8ce6431626a200d4ba66daa92c1568a3886792ab560c7a5db54a11f47f15a8

  • SSDEEP

    6144:iKP7LLDaqPhC6kqyDS7rM28pRTLxOoxVYt3RrpxxX2nj67K4lddj0/T:iK3//PhLevxO2Yt3HHGmWmder

Malware Config

Extracted

Family

vidar

Version

5.6

Botnet

e881aaf79bbebc43874722496eacba76

C2

https://steamcommunity.com/profiles/76561199550790047

https://t.me/bonoboaz

Attributes
  • profile_id_v2

    e881aaf79bbebc43874722496eacba76

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 OPR/103.0.0.0

Targets

    • Target

      JC_22151a4ebc1dacb53aa0718c44a135b5fbe5300af6c40261b362a5adcf0f5a41

    • Size

      315KB

    • MD5

      c29959fba5572140a60081a224cc66fc

    • SHA1

      7d2ff7587fb25ad8fa456ce6c89ccbf0befdb4d7

    • SHA256

      22151a4ebc1dacb53aa0718c44a135b5fbe5300af6c40261b362a5adcf0f5a41

    • SHA512

      d089e9e7fb1b4e8e8f6ede69dc6a45cb6183b35b977f9bc540853e95b80958226b8ce6431626a200d4ba66daa92c1568a3886792ab560c7a5db54a11f47f15a8

    • SSDEEP

      6144:iKP7LLDaqPhC6kqyDS7rM28pRTLxOoxVYt3RrpxxX2nj67K4lddj0/T:iK3//PhLevxO2Yt3HHGmWmder

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Enterprise v15

Tasks