vidar | 8335ea0b1510f82592f710ce7e79b69a6ea8e9886f303bbe07c25b872c7a9484 | Triage

Sharing

General

Target

JaffaCakes118_8335ea0b1510f82592f710ce7e79b69a6ea8e9886f303bbe07c25b872c7a9484
Size

727.3MB
Sample

241224-z6embaxqdk
MD5

9f6114f9172e1ee3105be1622bf3a9a6
SHA1

419425c3be4b890103919694d18f3b7bcb0f979a
SHA256

8335ea0b1510f82592f710ce7e79b69a6ea8e9886f303bbe07c25b872c7a9484
SHA512

4078cd60de96e667f1dd646c24637841e2707a7780c2336f0113c60bef92847e3652f7b654024e17986f9a7cda0f94671b2b72b786e4d2fc45d8866b7c6ee045
SSDEEP

196608:gdkyf7bsg8tniJ+uCpoAMba/dGEj4oYomLqXWrYrMOTEU:ekyf/18tniSqhOdXjnhmLoWrI

Score

10^/10

vidar 670 discovery stealer

Malware Config

Extracted

Family

vidar

Version

2.1

Botnet

670

C2

https://t.me/jetbim

https://steamcommunity.com/profiles/76561199471266194

http://65.21.58.6:80

Attributes

profile_id
670

Targets

- Target
  
  JaffaCakes118_8335ea0b1510f82592f710ce7e79b69a6ea8e9886f303bbe07c25b872c7a9484
- Size
  
  727.3MB
- MD5
  
  9f6114f9172e1ee3105be1622bf3a9a6
- SHA1
  
  419425c3be4b890103919694d18f3b7bcb0f979a
- SHA256
  
  8335ea0b1510f82592f710ce7e79b69a6ea8e9886f303bbe07c25b872c7a9484
- SHA512
  
  4078cd60de96e667f1dd646c24637841e2707a7780c2336f0113c60bef92847e3652f7b654024e17986f9a7cda0f94671b2b72b786e4d2fc45d8866b7c6ee045
- SSDEEP
  
  196608:gdkyf7bsg8tniJ+uCpoAMba/dGEj4oYomLqXWrYrMOTEU:ekyf/18tniSqhOdXjnhmLoWrI
Score

10^/10

vidar 670 discovery stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
- Vidar family
  vidar
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vidar670discoverystealer

behavioral2

vidar670discoverystealer