Overview

overview

10

Static

static

3

0638e1b63a...b1.exe

windows10-2004-x64

10

0638e1b63a...b1.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    0638e1b63ab03e799872443f07e8d47d2d33671e6341fc302606d54d7f3999b1.exe
  • Size 1.9MB
  • Sample260528-ebvd3aez3n
  • SHA256 0638e1b63ab03e799872443f07e8d47d2d33671e6341fc302606d54d7f3999b1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
vidarb96ee44c244190e3534de0839f9c76e5defense_evasionspywarestealertrojan

Malware Config

Extracted

Family

  • vidar

Version

  • 18.5

Botnet

  • b96ee44c244190e3534de0839f9c76e5

C2

  • https://telegram.me/mm8hyx

  • https://steamcommunity.com/profiles/76561198728266687

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0

Targets

    • Target
      0638e1b63ab03e799872443f07e8d47d2d33671e6341fc302606d54d7f3999b1.exe
    • Size 1.9MB
    • SHA256 0638e1b63ab03e799872443f07e8d47d2d33671e6341fc302606d54d7f3999b1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    b96ee44c244190e3534de0839f9c76e5vidarstealerdefense_evasionspywaretrojan

    • Detects Vidar Stealer

      stealer

    • Family: Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks