General

  • Target

    199c44e7bc7c65d6be9959d2d5875e9755104275de462698cd4f6ad94e57d25e.exe

  • Size

    283KB

  • Sample

    231201-v2he7aeb6x

  • MD5

    5d62710ed2721b8f1a4beb844d8b313d

  • SHA1

    32805f97f849881f4bc59688f42b48121af714c0

  • SHA256

    199c44e7bc7c65d6be9959d2d5875e9755104275de462698cd4f6ad94e57d25e

  • SHA512

    a736c7a7ec151dcc90cfd16e2472a62947c1f286e54ddfc40de4c86c0e657dc9f8cb951621f0ae0c6bca324b6d82892db22c7e6d23870f9c551c3afbb52da000

  • SSDEEP

    6144:/nyYUSun4ixKaq/idKTyAPR940tQVBXMxtMJs4:/a4ixKCKNP8dVBGtMJs

Malware Config

Extracted

Family

vidar

Version

6.7

Botnet

793ca785aab42bb0158c75e9cb100aee

C2

https://t.me/s4p0g

https://steamcommunity.com/profiles/76561199575355834

Attributes
  • profile_id_v2

    793ca785aab42bb0158c75e9cb100aee

Targets

    • Target

      199c44e7bc7c65d6be9959d2d5875e9755104275de462698cd4f6ad94e57d25e.exe

    • Size

      283KB

    • MD5

      5d62710ed2721b8f1a4beb844d8b313d

    • SHA1

      32805f97f849881f4bc59688f42b48121af714c0

    • SHA256

      199c44e7bc7c65d6be9959d2d5875e9755104275de462698cd4f6ad94e57d25e

    • SHA512

      a736c7a7ec151dcc90cfd16e2472a62947c1f286e54ddfc40de4c86c0e657dc9f8cb951621f0ae0c6bca324b6d82892db22c7e6d23870f9c551c3afbb52da000

    • SSDEEP

      6144:/nyYUSun4ixKaq/idKTyAPR940tQVBXMxtMJs4:/a4ixKCKNP8dVBGtMJs

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks