General

  • Target
    file_8eb65d0dcf9d4880.exe
  • Size 6.7MB
  • Sample260912-gzk7eaee83
  • SHA256 40b643468356c0fd751893647ad0dc9e2a0019427e4f5f0e2f6e559efcecb977
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • vidar

Version
  • 3.2

Botnet
  • c9e9a8ce47eb529601c1bb8d8883edb4

C2
  • https://t.me/nag0a

  • https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=EMqJL

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:34.0) Gecko/20100101 Firefox/34.0

Targets

    • Target
      file_8eb65d0dcf9d4880.exe
    • Size 6.7MB
    • SHA256 40b643468356c0fd751893647ad0dc9e2a0019427e4f5f0e2f6e559efcecb977
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Vidar

      Vidar is an infostealer based on Arkei stealer.

MITRE ATT&CK Matrix

Tasks