vidar

General

Target
d494477460b26ffbbd75a1e62b0f243e_JaffaCakes118
Size 1.5MB
Sample240908-ryjbjatdmc
SHA256 8f95ae5e5e774a322e272b430e09bbe7790ab8c57a804e07a053d489f48c8979
MD5 d494477460b26ffbbd75a1e62b0f243e
SHA1 484e46737ae1919047a32126a5423ec1f563bc5f
SHA512 bca9b9235cf0796352f6f8847d176b613e1421367af677281df306bdab19f241a9bfe77749e3dc5178008767b8cb5cb4a8ed8702119b1d5e616605e293691d3c
SSDEEP 24576:/obJrTrxaXKm0DDkXOSFcZekxcLxYCNc+mOw+RvVXk6ZsId:gtrTsXXQDkXOSFcZe1KR+vXE
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

vidar

Version

41.1

Botnet

921

C2

https://mas.to/@bardak1ho

Attributes

profile_id
921

Targets

- Target
  d494477460b26ffbbd75a1e62b0f243e_JaffaCakes118
- Size 1.5MB
- SHA256 8f95ae5e5e774a322e272b430e09bbe7790ab8c57a804e07a053d489f48c8979
- MD5 d494477460b26ffbbd75a1e62b0f243e
- SHA1 484e46737ae1919047a32126a5423ec1f563bc5f
- SHA512 bca9b9235cf0796352f6f8847d176b613e1421367af677281df306bdab19f241a9bfe77749e3dc5178008767b8cb5cb4a8ed8702119b1d5e616605e293691d3c
- SSDEEP 24576:/obJrTrxaXKm0DDkXOSFcZekxcLxYCNc+mOw+RvVXk6ZsId:gtrTsXXQDkXOSFcZe1KR+vXE
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

vidar 921 agilenet discovery stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
- Vidar Stealer
  stealer
- Loads dropped DLL
- Obfuscated with Agile.Net obfuscator
  Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
  agilenet
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Vidar Stealer

Loads dropped DLL

Obfuscated with Agile.Net obfuscator

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2