Resubmissions

28/02/2024, 12:37

240228-ptv4esbf7610

28/02/2024, 12:26

240228-pmcy9sbd7610

General

  • Target
    Lauucher-PC_S0FTv2O24.rar
  • Size 123.0MB
  • Sample240228-pmcy9sbd76
  • SHA256 c8c67f470f9d85d2e4e2ec44ed3c7bbfbdbd5b4fde5e189dede3879a984681a7
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • vidar

Version
  • 7.8

Botnet
  • 97b92d10859a319d8736cd53ff3f8868

C2
  • http://5.252.118.12:80

  • https://t.me/voolkisms

  • https://t.me/karl3on

  • https://steamcommunity.com/profiles/76561199637071579

Attributes
  • profile_id_v2

    97b92d10859a319d8736cd53ff3f8868

  • user_agent

    Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9

Targets

    • Target
      Lauucher-PC_S0FTv2O24.rar
    • Size 123.0MB
    • SHA256 c8c67f470f9d85d2e4e2ec44ed3c7bbfbdbd5b4fde5e189dede3879a984681a7
    • MD5 SHA1 SHA512 SSDEEP
    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks