General

  • Target

    2d44c1db05b8ef6f956fda08bcd3d9dda6dbebde688a642cde3d5092a4ef8764.exe

  • Size

    327KB

  • Sample

    231201-xv4e7afd7w

  • MD5

    96652aadb7c376a9f26774031af48aee

  • SHA1

    e584f41e99b408083fdf63775e9c0a3b93d0544b

  • SHA256

    2d44c1db05b8ef6f956fda08bcd3d9dda6dbebde688a642cde3d5092a4ef8764

  • SHA512

    17738fd91f9192aea3211a31a515b063becb80d88a46b4cfa874b2387b0c7b8e5f0574ac4ce1e96ffc66cc60aa37a03644e672dd08d9761dbd993eb8b16f3b13

  • SSDEEP

    3072:Yut72BcDclsKbyTqTJZ4uFCKPRVpC0zNwQtkUXSAFv9FaS0xZz:1Vwl6KbJ+w/RvC+NqUXnv9F8x

Malware Config

Extracted

Family

vidar

Version

6.7

Botnet

12c2d61a6798c01d07f5c4638a3ba698

C2

https://t.me/s4p0g

https://steamcommunity.com/profiles/76561199575355834

Attributes
  • profile_id_v2

    12c2d61a6798c01d07f5c4638a3ba698

Targets

    • Target

      2d44c1db05b8ef6f956fda08bcd3d9dda6dbebde688a642cde3d5092a4ef8764.exe

    • Size

      327KB

    • MD5

      96652aadb7c376a9f26774031af48aee

    • SHA1

      e584f41e99b408083fdf63775e9c0a3b93d0544b

    • SHA256

      2d44c1db05b8ef6f956fda08bcd3d9dda6dbebde688a642cde3d5092a4ef8764

    • SHA512

      17738fd91f9192aea3211a31a515b063becb80d88a46b4cfa874b2387b0c7b8e5f0574ac4ce1e96ffc66cc60aa37a03644e672dd08d9761dbd993eb8b16f3b13

    • SSDEEP

      3072:Yut72BcDclsKbyTqTJZ4uFCKPRVpC0zNwQtkUXSAFv9FaS0xZz:1Vwl6KbJ+w/RvC+NqUXnv9F8x

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks