Resubmissions

28-02-2024 12:37

240228-ptv4esbf76 10

28-02-2024 12:26

240228-pmcy9sbd76 10

General

  • Target

    Lauucher-PC_S0FTv2O24.rar

  • Size

    123.0MB

  • Sample

    240228-pmcy9sbd76

  • MD5

    bd941338e924c4ddfade115320e65da2

  • SHA1

    bce2e5d79c209d20e8dc180c500852c3dd6e5aad

  • SHA256

    c8c67f470f9d85d2e4e2ec44ed3c7bbfbdbd5b4fde5e189dede3879a984681a7

  • SHA512

    fd860790b6178d5d1fc731aa49b2d00623dfb23383fe2fcc0e3b99c7d94bab7fa93b7123e5484e25da109030f7a36f0436489b0c9e870b43e4169c2fe16c5e04

  • SSDEEP

    3145728:pg2QK0rjaiNEWUXO2VVU2azXEfn8PL7oHS5NEW8e8m2Th:+BCiNvsZnaAUPL7oYNEtmMh

Malware Config

Extracted

Family

vidar

Version

7.8

Botnet

97b92d10859a319d8736cd53ff3f8868

C2

http://5.252.118.12:80

https://t.me/voolkisms

https://t.me/karl3on

https://steamcommunity.com/profiles/76561199637071579

Attributes
  • profile_id_v2

    97b92d10859a319d8736cd53ff3f8868

  • user_agent

    Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9

Targets

    • Target

      Lauucher-PC_S0FTv2O24.rar

    • Size

      123.0MB

    • MD5

      bd941338e924c4ddfade115320e65da2

    • SHA1

      bce2e5d79c209d20e8dc180c500852c3dd6e5aad

    • SHA256

      c8c67f470f9d85d2e4e2ec44ed3c7bbfbdbd5b4fde5e189dede3879a984681a7

    • SHA512

      fd860790b6178d5d1fc731aa49b2d00623dfb23383fe2fcc0e3b99c7d94bab7fa93b7123e5484e25da109030f7a36f0436489b0c9e870b43e4169c2fe16c5e04

    • SSDEEP

      3145728:pg2QK0rjaiNEWUXO2VVU2azXEfn8PL7oHS5NEW8e8m2Th:+BCiNvsZnaAUPL7oYNEtmMh

    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Executes dropped EXE

MITRE ATT&CK Matrix ATT&CK v13

Tasks