General

  • Target

    file

  • Size

    295KB

  • Sample

    231201-n1d8tahf3x

  • MD5

    7600933588af5a44bf63ab0829534f8a

  • SHA1

    16482b513fcdbb46f528a079ce3942314ece1b3f

  • SHA256

    c2c5d319bc5fe424a8ea42a8626dd6b93b27f1a23aa45611df09ecf55dfa1dfa

  • SHA512

    ce890eccaaf08522bfac0e08abbf9f43559f971b01feb45735ef84700b696b8c206bc7c874671fc2da75c72ee53e9a9e89b04dab9814d49115711ff887456573

  • SSDEEP

    6144:Vh0Ej+3Mh8dV5MRWTa03cMMTmFAKo58oWnIoQGPRqa6Z3h+V/9H:VAMh8dVu8u5TmCZ8hnIoQGPR96ZMF

Malware Config

Extracted

Family

vidar

Version

6.7

Botnet

52d67d34ad338b1aab9d89c0da5a59b1

C2

https://t.me/s4p0g

https://steamcommunity.com/profiles/76561199575355834

Attributes
  • profile_id_v2

    52d67d34ad338b1aab9d89c0da5a59b1

Targets

    • Target

      file

    • Size

      295KB

    • MD5

      7600933588af5a44bf63ab0829534f8a

    • SHA1

      16482b513fcdbb46f528a079ce3942314ece1b3f

    • SHA256

      c2c5d319bc5fe424a8ea42a8626dd6b93b27f1a23aa45611df09ecf55dfa1dfa

    • SHA512

      ce890eccaaf08522bfac0e08abbf9f43559f971b01feb45735ef84700b696b8c206bc7c874671fc2da75c72ee53e9a9e89b04dab9814d49115711ff887456573

    • SSDEEP

      6144:Vh0Ej+3Mh8dV5MRWTa03cMMTmFAKo58oWnIoQGPRqa6Z3h+V/9H:VAMh8dVu8u5TmCZ8hnIoQGPR96ZMF

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks