vidar | ed49e852356fc64effbbe3e2d4cc8ea5b9d79b77fa08133b942e3ef3403b34ff | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...eb.exe

windows7-x64

JaffaCakes...eb.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_63c40028125acefa332aaa57ae8938eb
Size

1.2MB
Sample

250107-p16hqs1rcw
MD5

63c40028125acefa332aaa57ae8938eb
SHA1

9c889a7d6703b17937e4f7e471251387d5fe6d53
SHA256

ed49e852356fc64effbbe3e2d4cc8ea5b9d79b77fa08133b942e3ef3403b34ff
SHA512

b6f038eaae9aa423eac90a2d6f80545c345a2e13dc7c15d76fe03d117830969c34897be9c7288d93d642bee76f51a0c1ccd0e6e09bbbf55543ceea7fcef507ea
SSDEEP

24576:deeuI73ROoGgF9Wu6lqlJ39o16PFViLxmaJ9spcGHcd3fV2ZpGw1bB:dpuI73T59Pwk9xPDcNGIPV2Hr1

Score

10^/10

vidar discovery stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_63c40028125acefa332aaa57ae8938eb.exe

Resource

win7-20240903-en

vidar discovery stealer

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_63c40028125acefa332aaa57ae8938eb.exe

Resource

win10v2004-20241007-en

vidar discovery stealer

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_63c40028125acefa332aaa57ae8938eb
- Size
  
  1.2MB
- MD5
  
  63c40028125acefa332aaa57ae8938eb
- SHA1
  
  9c889a7d6703b17937e4f7e471251387d5fe6d53
- SHA256
  
  ed49e852356fc64effbbe3e2d4cc8ea5b9d79b77fa08133b942e3ef3403b34ff
- SHA512
  
  b6f038eaae9aa423eac90a2d6f80545c345a2e13dc7c15d76fe03d117830969c34897be9c7288d93d642bee76f51a0c1ccd0e6e09bbbf55543ceea7fcef507ea
- SSDEEP
  
  24576:deeuI73ROoGgF9Wu6lqlJ39o16PFViLxmaJ9spcGHcd3fV2ZpGw1bB:dpuI73T59Pwk9xPDcNGIPV2Hr1
Score

10^/10

vidar discovery stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
- Vidar family
  vidar
- Vidar Stealer
  stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vidardiscoverystealer

behavioral2

vidardiscoverystealer

© 2018-2025

Terms | Privacy