General

  • Target

    Lauucher-PC_S0FTv2O24.rar

  • Size

    123.0MB

  • Sample

    240320-26nw4aef81

  • MD5

    39e94cad4d3077f77b14d1d530e32092

  • SHA1

    891789c0cf9ffcb73928ead05e0e92fb227c8c1b

  • SHA256

    5711ef9313874698d0bb4677867e859b26aa677187ac8b9ade6d6eab0b9c41cc

  • SHA512

    81f5cd05f77a77527f3f389610ab307302ebb9a5add5dc46200d2b5c0710224c6c4e50c7e0f41310e66a45a7b1ed1590359f5ce51119efcaa66d5e8d0b2e8277

  • SSDEEP

    3145728:PmlOX0ssOx11RNr/X6jGgBbXqGWodzbE3QjxKVQxQq:PmTe1RNQGgwGzb1xKyv

Malware Config

Extracted

Family

vidar

Version

7.8

Botnet

97b92d10859a319d8736cd53ff3f8868

C2

http://5.252.118.12:80

https://t.me/voolkisms

https://t.me/karl3on

https://steamcommunity.com/profiles/76561199637071579

Attributes
  • profile_id_v2

    97b92d10859a319d8736cd53ff3f8868

  • user_agent

    Mozilla/5.0 (X11; Linux 3.5.4-1-ARCH i686; es) KHTML/4.9.1 (like Gecko) Konqueror/4.9

Targets

    • Target

      Lauucher-PC_S0FTv2O24.rar

    • Size

      123.0MB

    • MD5

      39e94cad4d3077f77b14d1d530e32092

    • SHA1

      891789c0cf9ffcb73928ead05e0e92fb227c8c1b

    • SHA256

      5711ef9313874698d0bb4677867e859b26aa677187ac8b9ade6d6eab0b9c41cc

    • SHA512

      81f5cd05f77a77527f3f389610ab307302ebb9a5add5dc46200d2b5c0710224c6c4e50c7e0f41310e66a45a7b1ed1590359f5ce51119efcaa66d5e8d0b2e8277

    • SSDEEP

      3145728:PmlOX0ssOx11RNr/X6jGgBbXqGWodzbE3QjxKVQxQq:PmTe1RNQGgwGzb1xKyv

    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Executes dropped EXE

MITRE ATT&CK Matrix ATT&CK v13

Tasks