vidar | 7c76bb67bd835d091bc1202f421c9ce0e7f371ae9d16d03f9be46adf293fb86b | Triage

Sharing

General

Target

JaffaCakes118_7c76bb67bd835d091bc1202f421c9ce0e7f371ae9d16d03f9be46adf293fb86b
Size

718.6MB
Sample

241222-bw9gyaxraq
MD5

28341fe3fcc44ae3a6b3e6b2bfbb12a4
SHA1

f78717d216c50710d5d848eab4c27733cb7d5f2e
SHA256

7c76bb67bd835d091bc1202f421c9ce0e7f371ae9d16d03f9be46adf293fb86b
SHA512

3e4d457484acee2a7ad37383fa641994f36f58852f3156c953d4565d7b3e8d7c620b15f825c7bc30ff45df0c06b1dbee119d40a688eff8c9a6cae6a3506c4bc9
SSDEEP

12288:9Hqj8TieUKs2tZZy9jhrb7z/cbVZnwo5EOP8Ai:9HqjL9L2ly91rrcbV1wo51PK

Score

10^/10

vidar 1702 discovery stealer

Malware Config

Extracted

Family

vidar

Version

55.7

Botnet

1702

C2

https://t.me/deadftx

https://www.tiktok.com/@user6068972597711

http://116.202.2.1:80

Attributes

profile_id
1702

Targets

- Target
  
  JaffaCakes118_7c76bb67bd835d091bc1202f421c9ce0e7f371ae9d16d03f9be46adf293fb86b
- Size
  
  718.6MB
- MD5
  
  28341fe3fcc44ae3a6b3e6b2bfbb12a4
- SHA1
  
  f78717d216c50710d5d848eab4c27733cb7d5f2e
- SHA256
  
  7c76bb67bd835d091bc1202f421c9ce0e7f371ae9d16d03f9be46adf293fb86b
- SHA512
  
  3e4d457484acee2a7ad37383fa641994f36f58852f3156c953d4565d7b3e8d7c620b15f825c7bc30ff45df0c06b1dbee119d40a688eff8c9a6cae6a3506c4bc9
- SSDEEP
  
  12288:9Hqj8TieUKs2tZZy9jhrb7z/cbVZnwo5EOP8Ai:9HqjL9L2ly91rrcbV1wo51PK
Score

10^/10

vidar 1702 discovery stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
- Vidar family
  vidar
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vidar1702discoverystealer

behavioral2

vidar1702discoverystealer