Overview

overview

10

Static

static

10

1820-3-0x0...ry.exe

windows7-x64

10

1820-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1820-3-0x0000000000400000-0x00000000007D3000-memory.dmp

  • Size

    3.8MB

  • Sample

    231201-n34w9ahf4y

  • MD5

    6bfd40e3f156bf51e950b29c0f891cd2

  • SHA1

    6c9ca8301bd05069553edf47e5731553af313771

  • SHA256

    43cd1e12828d7e6c9bf16972e62d77466953701c5029ede496a77f08fc678a50

  • SHA512

    c1f0e0e410bb5ab11572a76528e5c2459969aead506540eaa519213df9b2864747319551b9e5096b9df5fcdb4fe12a662a85d1113698f5b97755fb37c77dd2e1

  • SSDEEP

    3072:ffysv34+VEjY9c5WuSIfSJKTuz1F/nMR8yPUxcrmnUlnrnTfmJ/qIsn8qqVnCdBw:ffyKE89+WyPTuz70R8yTnrjQQhp

Score
10/10
vidar52d67d34ad338b1aab9d89c0da5a59b1stealer

Malware Config

Extracted

Family

vidar

Version

6.7

Botnet

52d67d34ad338b1aab9d89c0da5a59b1

C2

https://t.me/s4p0g

https://steamcommunity.com/profiles/76561199575355834
Attributes
  • profile_id_v2

    52d67d34ad338b1aab9d89c0da5a59b1

Targets

    • Target

      1820-3-0x0000000000400000-0x00000000007D3000-memory.dmp

    • Size

      3.8MB

    • MD5

      6bfd40e3f156bf51e950b29c0f891cd2

    • SHA1

      6c9ca8301bd05069553edf47e5731553af313771

    • SHA256

      43cd1e12828d7e6c9bf16972e62d77466953701c5029ede496a77f08fc678a50

    • SHA512

      c1f0e0e410bb5ab11572a76528e5c2459969aead506540eaa519213df9b2864747319551b9e5096b9df5fcdb4fe12a662a85d1113698f5b97755fb37c77dd2e1

    • SSDEEP

      3072:ffysv34+VEjY9c5WuSIfSJKTuz1F/nMR8yPUxcrmnUlnrnTfmJ/qIsn8qqVnCdBw:ffyKE89+WyPTuz70R8yTnrjQQhp

    Score
    10/10
    vidarstealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks