vidar

General

Target

file.exe
Size

275KB
Sample

240223-yxnyyshc2v
MD5

73f69cf667670634d5e76e4a880a8d1f
SHA1

6ac8342ae2463ab979ac22d564ee508bc6f40240
SHA256

2adb4934d8f9333b0e5ab20c06afa5d83e5e477f09df978effcd362074b4d0b9
SHA512

484b4160e961b4759746cc2e374b146576a329e553507c179a4598bd16e1ea6a786fb5b09de5d6c60785630a31f8ba09b526d83c643ded55fda6bca64bd4e768
SSDEEP

3072:aEWlDIX2EmU3WDRciGGCOqHslNn1YKny4rOWN7vDbKGIdPxIX3Iv2+57iTCejVf4:iEOdezE1TnX6UDEPxI2iTCep

Score

10^/10

Malware Config

Extracted

Family

vidar

Version

7.9

Botnet

64928583ce0228f6ec22bfb02c3b79a8

C2

https://t.me/hypergog

https://steamcommunity.com/profiles/76561199642171824

Attributes

profile_id_v2
64928583ce0228f6ec22bfb02c3b79a8
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36

Targets

- Target
  
  file.exe
- Size
  
  275KB
- MD5
  
  73f69cf667670634d5e76e4a880a8d1f
- SHA1
  
  6ac8342ae2463ab979ac22d564ee508bc6f40240
- SHA256
  
  2adb4934d8f9333b0e5ab20c06afa5d83e5e477f09df978effcd362074b4d0b9
- SHA512
  
  484b4160e961b4759746cc2e374b146576a329e553507c179a4598bd16e1ea6a786fb5b09de5d6c60785630a31f8ba09b526d83c643ded55fda6bca64bd4e768
- SSDEEP
  
  3072:aEWlDIX2EmU3WDRciGGCOqHslNn1YKny4rOWN7vDbKGIdPxIX3Iv2+57iTCejVf4:iEOdezE1TnX6UDEPxI2iTCep
Score

10^/10

vidar 64928583ce0228f6ec22bfb02c3b79a8 stealer
- Detect Vidar Stealer
  stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Subvert Trust Controls

1

T1553

Install Root Certificate

1

T1553.004

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detect Vidar Stealer

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2