vidar | 460820023a07bdd17f34f5d8e34c9a8d09095fcc40a5b3b1208bfecb9ab323c8 | Triage

Submit
Reports

Overview

overview

Static

static

3

a5f71bf04a...18.exe

windows7-x64

a5f71bf04a...18.exe

windows10-2004-x64

Sharing

General

Target

a5f71bf04a51fb3c1db0e08378f65fdc_JaffaCakes118
Size

657KB
Sample

241127-fb1fraxndx
MD5

a5f71bf04a51fb3c1db0e08378f65fdc
SHA1

846e8a9cc96d760b59451dfd155312b0654d6205
SHA256

460820023a07bdd17f34f5d8e34c9a8d09095fcc40a5b3b1208bfecb9ab323c8
SHA512

808351a5340f8d388204d9f9e70855efaaeb9f1bb4409502cab016e7b9bcfb8569cf51174a2e0fad2a8600c5a3a0b8ade501f2e65aaa320086f21862a779a30a
SSDEEP

12288:PyuWJIdVPpK+cwYFp0kDTuE0s3V7HLkDlQViaBUJMJgyrnLG4Voss9jdSRr/7I0R:OadVPpKFVF0EdxlxBdgyrPKlJU/7Im

Score

10^/10

vidar 916 discovery stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a5f71bf04a51fb3c1db0e08378f65fdc_JaffaCakes118.exe

Resource

win7-20240903-en

vidar 916 discovery stealer

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

a5f71bf04a51fb3c1db0e08378f65fdc_JaffaCakes118.exe

Resource

win10v2004-20241007-en

vidar 916 discovery stealer

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Extracted

Family

vidar

Version

40

Botnet

916

C2

https://lenak513.tumblr.com/

Attributes

profile_id
916

Targets

- Target
  
  a5f71bf04a51fb3c1db0e08378f65fdc_JaffaCakes118
- Size
  
  657KB
- MD5
  
  a5f71bf04a51fb3c1db0e08378f65fdc
- SHA1
  
  846e8a9cc96d760b59451dfd155312b0654d6205
- SHA256
  
  460820023a07bdd17f34f5d8e34c9a8d09095fcc40a5b3b1208bfecb9ab323c8
- SHA512
  
  808351a5340f8d388204d9f9e70855efaaeb9f1bb4409502cab016e7b9bcfb8569cf51174a2e0fad2a8600c5a3a0b8ade501f2e65aaa320086f21862a779a30a
- SSDEEP
  
  12288:PyuWJIdVPpK+cwYFp0kDTuE0s3V7HLkDlQViaBUJMJgyrnLG4Voss9jdSRr/7I0R:OadVPpKFVF0EdxlxBdgyrPKlJU/7Im
Score

10^/10

vidar 916 discovery stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
- Vidar family
  vidar
- Vidar Stealer
  stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vidar916discoverystealer

behavioral2

vidar916discoverystealer

© 2018-2024

Terms | Privacy