General

  • Target

    acff4bc8180417126563b61755dd464c.exe

  • Size

    347KB

  • Sample

    231202-t8talaea5s

  • MD5

    acff4bc8180417126563b61755dd464c

  • SHA1

    e246a80f90d88d5df99e4e75bb44825fdc22a531

  • SHA256

    e5e6df5b10de610ad7ba25d4ba98a3af2788d45c143d8fa3adb6f0843c0b1aab

  • SHA512

    679589fc85e63682ad43f172a1461c0ab1a6dfefc46fb34691805adb39f461db26593d3de6a9143aa8219cd9493fa97df3bb80a21889cbe0ec8ba2fdf0d702aa

  • SSDEEP

    3072:/EQhBUz3mVrpYT3Twdxx6QHHysSygmP9jwQHKp5R5vAMu63jXdo:MIUruODEdH6QHF5gKWQHK9tJjX

Malware Config

Extracted

Family

vidar

Version

6.7

Botnet

b38cb04787049a109b9655c2379f5b97

C2

https://t.me/s4p0g

https://steamcommunity.com/profiles/76561199575355834

Attributes
  • profile_id_v2

    b38cb04787049a109b9655c2379f5b97

Targets

    • Target

      acff4bc8180417126563b61755dd464c.exe

    • Size

      347KB

    • MD5

      acff4bc8180417126563b61755dd464c

    • SHA1

      e246a80f90d88d5df99e4e75bb44825fdc22a531

    • SHA256

      e5e6df5b10de610ad7ba25d4ba98a3af2788d45c143d8fa3adb6f0843c0b1aab

    • SHA512

      679589fc85e63682ad43f172a1461c0ab1a6dfefc46fb34691805adb39f461db26593d3de6a9143aa8219cd9493fa97df3bb80a21889cbe0ec8ba2fdf0d702aa

    • SSDEEP

      3072:/EQhBUz3mVrpYT3Twdxx6QHHysSygmP9jwQHKp5R5vAMu63jXdo:MIUruODEdH6QHF5gKWQHK9tJjX

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks