vidar | 66028849a2e0c56e20bc6c17e7acf127cb7da54b8ca1c0eec303fbae79c72888 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

1

random.exe

windows10-2004-x64

random.exe

windows7-x64

Sharing

General

Target

random.exe
Size

989KB
Sample

250201-y5jdfazqfn
MD5

f2432fdb07cac95c4481843ff0e77fd7
SHA1

edc08e196ee4ca14f9a57baeab6723cb42118ce3
SHA256

66028849a2e0c56e20bc6c17e7acf127cb7da54b8ca1c0eec303fbae79c72888
SHA512

a57c50ec93e8bab6c867866b382a1b467fa151da1f0d080a4c6fc8084f65e3d49123ea2e238ae43b3c0f685a77d860b71218682835314890652ac368631d9a3d
SSDEEP

24576:KU/4804Y0vqB0iIHTmjtghDrE3+Zu8BKghhTMveogJiEOB:e8FgB0iQCtg+b8KAZI7j

Score

10^/10

vidar discovery stealer

Static task

static1

Behavioral task

behavioral1

Sample

random.exe

Resource

win10v2004-20250129-en

vidar discovery stealer

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

random.exe

Resource

win7-20240903-en

vidar discovery stealer

windows7-x64

14 signatures

150 seconds

Malware Config

Extracted

Family

vidar

C2

https://t.me/m08mbk

https://steamcommunity.com/profiles/76561199820567237

Attributes

user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0

Targets

- Target
  
  random.exe
- Size
  
  989KB
- MD5
  
  f2432fdb07cac95c4481843ff0e77fd7
- SHA1
  
  edc08e196ee4ca14f9a57baeab6723cb42118ce3
- SHA256
  
  66028849a2e0c56e20bc6c17e7acf127cb7da54b8ca1c0eec303fbae79c72888
- SHA512
  
  a57c50ec93e8bab6c867866b382a1b467fa151da1f0d080a4c6fc8084f65e3d49123ea2e238ae43b3c0f685a77d860b71218682835314890652ac368631d9a3d
- SSDEEP
  
  24576:KU/4804Y0vqB0iIHTmjtghDrE3+Zu8BKghhTMveogJiEOB:e8FgB0iQCtg+b8KAZI7j
Score

10^/10

vidar discovery stealer
- Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
- Vidar family
  vidar
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vidardiscoverystealer

behavioral2

vidardiscoverystealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.