General

  • Target

    8f450842295f11d02566dec2fd908439

  • Size

    4.2MB

  • Sample

    231219-yydjlsdea5

  • MD5

    8f450842295f11d02566dec2fd908439

  • SHA1

    44a490992ee129d575248e005dfff75e06f3e190

  • SHA256

    4b8108f69b6b6d3c1864f4f6e07e9bd9692ac780d6c39838c8e2e0aef569edc9

  • SHA512

    a163f62c89f169d7cbaa966b6acc0065e75d62eb01fcd01e6521ab00541ea8f14a01ab61ce18e6c18d308daccc409597c3d72c94b8e4b3605c967f0ebab906b4

  • SSDEEP

    98304:Ixlu7TMELV3C0FgZZYdnkIPy35W3j+Ixs+biKPd+M:Iru7Tn0jEHy306GriC

Malware Config

Extracted

Family

vidar

Version

41.1

Botnet

1028

C2

https://mas.to/@bardak1ho

Attributes
  • profile_id

    1028

Targets

    • Target

      8f450842295f11d02566dec2fd908439

    • Size

      4.2MB

    • MD5

      8f450842295f11d02566dec2fd908439

    • SHA1

      44a490992ee129d575248e005dfff75e06f3e190

    • SHA256

      4b8108f69b6b6d3c1864f4f6e07e9bd9692ac780d6c39838c8e2e0aef569edc9

    • SHA512

      a163f62c89f169d7cbaa966b6acc0065e75d62eb01fcd01e6521ab00541ea8f14a01ab61ce18e6c18d308daccc409597c3d72c94b8e4b3605c967f0ebab906b4

    • SSDEEP

      98304:Ixlu7TMELV3C0FgZZYdnkIPy35W3j+Ixs+biKPd+M:Iru7Tn0jEHy306GriC

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Vidar Stealer

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks