General

  • Target

    2140-3-0x0000000000400000-0x0000000002ACD000-memory.dmp

  • Size

    38.8MB

  • Sample

    231202-vd57caea81

  • MD5

    c6f861eed223b62c7f07ebf2f1683272

  • SHA1

    81503fb5e98b9e1a0d7ab28698f31175f41cebd2

  • SHA256

    2867f0355e38e9be503d1ec97152643adc51e8f5d1a2c1f7bbbf8a13ba14b071

  • SHA512

    c274d0292a84ffdebb80be6172ef5a5ecb6277e3d84e3e245406ead7bcb1c8056ad66f714987643d97539536ef5b0e5b26867135476ad67a15e5cb1b86cee9b0

  • SSDEEP

    3072:afysv34+VEjY9c5WuSIfSJKTuz1F/nMR8yPUxcrmnUlnrnTfmJ/qIsn8qqVnCJHu:afyKE89+WyPTuz70R8yTnrjwQhJtJjX

Malware Config

Extracted

Family

vidar

Version

6.7

Botnet

b38cb04787049a109b9655c2379f5b97

C2

https://t.me/s4p0g

https://steamcommunity.com/profiles/76561199575355834

Attributes
  • profile_id_v2

    b38cb04787049a109b9655c2379f5b97

Targets

    • Target

      2140-3-0x0000000000400000-0x0000000002ACD000-memory.dmp

    • Size

      38.8MB

    • MD5

      c6f861eed223b62c7f07ebf2f1683272

    • SHA1

      81503fb5e98b9e1a0d7ab28698f31175f41cebd2

    • SHA256

      2867f0355e38e9be503d1ec97152643adc51e8f5d1a2c1f7bbbf8a13ba14b071

    • SHA512

      c274d0292a84ffdebb80be6172ef5a5ecb6277e3d84e3e245406ead7bcb1c8056ad66f714987643d97539536ef5b0e5b26867135476ad67a15e5cb1b86cee9b0

    • SSDEEP

      3072:afysv34+VEjY9c5WuSIfSJKTuz1F/nMR8yPUxcrmnUlnrnTfmJ/qIsn8qqVnCJHu:afyKE89+WyPTuz70R8yTnrjwQhJtJjX

    Score
    10/10
    • Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Matrix

Tasks