General

  • Target

    33b04a8d7bc2da4d5e00ce9acd0e5755daf961f1a8574ef84ba3d58761127d6a.exe

  • Size

    332KB

  • Sample

    231201-ymle3sfg8x

  • MD5

    6a68babd027c9fee09fbc161259f04db

  • SHA1

    3bfb0d466e775cfded08be0bbde7329b642324e5

  • SHA256

    33b04a8d7bc2da4d5e00ce9acd0e5755daf961f1a8574ef84ba3d58761127d6a

  • SHA512

    4f3355ec3ac2ea5b756cf4f7276385ce0dd0a76aa1da0cfe2b07c57f25a5a1f029540e721456217dcbf3cdef62e33e1afdc4afb81eca54a509cc29b05cf374d9

  • SSDEEP

    3072:uxlrrTgrrHy+ioC/cuUnqJtT/ai1VyHe55wPtjSPf5lOMY7M59UXgw8:SrTa28QKstTSi1IHe3ktePOhg5C0

Malware Config

Extracted

Family

vidar

Version

6.7

Botnet

793ca785aab42bb0158c75e9cb100aee

C2

https://t.me/s4p0g

https://steamcommunity.com/profiles/76561199575355834

Attributes
  • profile_id_v2

    793ca785aab42bb0158c75e9cb100aee

Targets

    • Target

      33b04a8d7bc2da4d5e00ce9acd0e5755daf961f1a8574ef84ba3d58761127d6a.exe

    • Size

      332KB

    • MD5

      6a68babd027c9fee09fbc161259f04db

    • SHA1

      3bfb0d466e775cfded08be0bbde7329b642324e5

    • SHA256

      33b04a8d7bc2da4d5e00ce9acd0e5755daf961f1a8574ef84ba3d58761127d6a

    • SHA512

      4f3355ec3ac2ea5b756cf4f7276385ce0dd0a76aa1da0cfe2b07c57f25a5a1f029540e721456217dcbf3cdef62e33e1afdc4afb81eca54a509cc29b05cf374d9

    • SSDEEP

      3072:uxlrrTgrrHy+ioC/cuUnqJtT/ai1VyHe55wPtjSPf5lOMY7M59UXgw8:SrTa28QKstTSi1IHe3ktePOhg5C0

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks