General

  • Target

    946e133ab8f86b5f868e1217779f35004e27b3c79f0dd70c6d85756a85ea2e22

  • Size

    148KB

  • Sample

    240417-qnrdqaah41

  • MD5

    c0605507bbe61322e9084821091d6bb8

  • SHA1

    263ff299baa103ae15c7750f143f640c49f5b47d

  • SHA256

    946e133ab8f86b5f868e1217779f35004e27b3c79f0dd70c6d85756a85ea2e22

  • SHA512

    a2db369aaaeeb14d4c04eb7420a2601c93a9ff8095c5d8266228956fde2ab97c30c4878227e32e593957b7a4601f2f1fabf5c2c1aa98f5051cb3e230d322d0bf

  • SSDEEP

    3072:ATEAhBslxBcIIQtjSVyZQCFJ6//ZsAE1p1VXabrkPsRnGsPxAJZs:4EA7sVIQtjSa16nZsPD1VVgfx4G

Malware Config

Extracted

Family

vidar

Version

6.4

Botnet

181eb512368c942704e3ada53738a1d7

C2

https://t.me/secgoxrp

https://steamcommunity.com/profiles/76561199568528949

Attributes
  • profile_id_v2

    181eb512368c942704e3ada53738a1d7

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:110.0) Gecko/20100101 Firefox/121.0

Targets

    • Target

      bd442895a10c0b01daa543174c33d31ed05b905af2c6f5ab56c709893b1eed34.exe

    • Size

      253KB

    • MD5

      34c857dbfb1d5b7e53c67979560a10ad

    • SHA1

      7cbb6cb95f3dce4a0da66ea4e4eadfba74031435

    • SHA256

      bd442895a10c0b01daa543174c33d31ed05b905af2c6f5ab56c709893b1eed34

    • SHA512

      323f2feda71928e600a6cf53dd5c446ce7ad1c661a353ff7f02f9fdca24a35c19d18f9cc34325197947abca984e958d115cbf71b3c4d7e9f668834f46e7009d6

    • SSDEEP

      3072:RSd6WKzEFwzwoCaYFhn3x2uCGDsZcjua1SvenwVveM2fPZfPLsO2I:IdUWopCauFCIsguknW8hl

    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks