vidar | c4a68f60a470e7a8a91d2a23d50ffb492ec5119a3311d5c3bae7f9faca5bdc0c | Triage

Sharing

General

Target

c4a68f60a470e7a8a91d2a23d50ffb492ec5119a3311d5c3bae7f9faca5bdc0c
Size

726.8MB
Sample

241221-t3g1datkbp
MD5

90b6157f3d232a14136bd4b1cf6d226e
SHA1

204d63255a5addfad3afbc0a9d82a80cd05d716a
SHA256

c4a68f60a470e7a8a91d2a23d50ffb492ec5119a3311d5c3bae7f9faca5bdc0c
SHA512

642e5acf719f64b59b795edcf34ec9aecce9de12908bfdd8c6b356d1d793db203a19a02b51f7d9183d36a7fecffa0b01d164f2610d967be24ea85ca1e795133e
SSDEEP

196608:jYmgaJptScC8HFvdacoNIEJrwHCf3cHx5:jgaTvda3WRQ3cL

Score

10^/10

vidar 670 discovery stealer

Malware Config

Extracted

Family

vidar

Version

2.1

Botnet

670

C2

https://t.me/jetbim

https://steamcommunity.com/profiles/76561199471266194

http://65.21.58.6:80

Attributes

profile_id
670

Targets

- Target
  
  c4a68f60a470e7a8a91d2a23d50ffb492ec5119a3311d5c3bae7f9faca5bdc0c
- Size
  
  726.8MB
- MD5
  
  90b6157f3d232a14136bd4b1cf6d226e
- SHA1
  
  204d63255a5addfad3afbc0a9d82a80cd05d716a
- SHA256
  
  c4a68f60a470e7a8a91d2a23d50ffb492ec5119a3311d5c3bae7f9faca5bdc0c
- SHA512
  
  642e5acf719f64b59b795edcf34ec9aecce9de12908bfdd8c6b356d1d793db203a19a02b51f7d9183d36a7fecffa0b01d164f2610d967be24ea85ca1e795133e
- SSDEEP
  
  196608:jYmgaJptScC8HFvdacoNIEJrwHCf3cHx5:jgaTvda3WRQ3cL
Score

10^/10

vidar 670 discovery stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
- Vidar family
  vidar
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vidar670discoverystealer

behavioral2

vidar670discoverystealer