vidar

General

Target

file.exe
Size

267KB
Sample

240225-q34btsda54
MD5

a45d852fe089cda3040623e5bbb3bff3
SHA1

45264d33a9529a26058d38e90183db4f83bdd2cb
SHA256

872a0b080e271649b851c20da763176e91b82cd83b133771bc83f7a8d2b00f65
SHA512

f2d3857f00085ac860171a29c457ecf3ece1709f14d58ef6862788eca8b4c19772cb3d1fe7054d9f84f54874b3298d00403d10460764df4bbe6bdd1d8de89954
SSDEEP

3072:d0+s2mbG5ULHPGifydADcW5G8zvFkieMGvjVJfOzAzY0ioJDQS1XMiU5rCNXJ:KzNLH+ifXDcsG8pkXRvTNzrJDQoT/F

Score

10^/10

Malware Config

Extracted

Family

vidar

Version

7.9

Botnet

64928583ce0228f6ec22bfb02c3b79a8

C2

https://t.me/hypergog

https://steamcommunity.com/profiles/76561199642171824

Attributes

profile_id_v2
64928583ce0228f6ec22bfb02c3b79a8
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36

Targets

- Target
  
  file.exe
- Size
  
  267KB
- MD5
  
  a45d852fe089cda3040623e5bbb3bff3
- SHA1
  
  45264d33a9529a26058d38e90183db4f83bdd2cb
- SHA256
  
  872a0b080e271649b851c20da763176e91b82cd83b133771bc83f7a8d2b00f65
- SHA512
  
  f2d3857f00085ac860171a29c457ecf3ece1709f14d58ef6862788eca8b4c19772cb3d1fe7054d9f84f54874b3298d00403d10460764df4bbe6bdd1d8de89954
- SSDEEP
  
  3072:d0+s2mbG5ULHPGifydADcW5G8zvFkieMGvjVJfOzAzY0ioJDQS1XMiU5rCNXJ:KzNLH+ifXDcsG8pkXRvTNzrJDQoT/F
Score

10^/10

vidar 64928583ce0228f6ec22bfb02c3b79a8 stealer
- Detect Vidar Stealer
  stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Subvert Trust Controls

1

T1553

Install Root Certificate

1

T1553.004

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detect Vidar Stealer

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2