General

  • Target
    FLPro.rar
  • Size 100.0MB
  • Sample260930-27menawamf
  • SHA256 ee9df9c827df180a7cb0d776278f56934ae3b8825d72a39ad57b868e5c392814
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • vidar

Version
  • 3.6

Botnet
  • c37d044b586085cb988ca031078a0863

C2
  • https://217.60.102.236

  • https://telegram.me/j88hor

  • https://community.fandom.com/wikia.php?controller=UserProfile&method=getUserData&format=json&userId=64296247

  • https://steamcommunity.com/profiles/76561198633950250

Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/150.0.0.0 YaBrowser/26.8.0.0

Targets

    • Target
      FLPro.rar
    • Size 100.0MB
    • SHA256 ee9df9c827df180a7cb0d776278f56934ae3b8825d72a39ad57b868e5c392814
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/FL Studio Pro.exe
    • Size 11.2MB
    • SHA256 def44bca2f32a3713747625f91899d01d8b4026d001f177173ad0f3227750490
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Target
      Pro/dual_engine_adapter_x64.dll
    • Size 5.1MB
    • SHA256 d5ec2ca6c7c116f57f45b3a80a99664b68f02be305d8d41427f4af877421011f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/dxil.dll
    • Size 1.4MB
    • SHA256 3855461625ced4bfc89171ef465b398f75ce1bdef4fc565d850159e35341744a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/eventlog_provider.dll
    • Size 15KB
    • SHA256 ab44220f0647d6d1a5df27d11be725a937b1a096b620638bacef5ad01db50646
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/learning_tools.dll
    • Size 1.2MB
    • SHA256 c4b3c8846438fc2461dc8603d1e47e3871c8e5fef4a30a8b1894d485a8715c9c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/libEGL.dll
    • Size 499KB
    • SHA256 6397808c0745f08bc971dcf1eda61deb164d9c372dc6d5dd2fe8eccbdb7fc341
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/microsoft_shell_integration.dll
    • Size 449KB
    • SHA256 d1fc28030b6e9974cfd71a3bd6fab0d5e3f31b375573f0d10ff957ac4146ef00
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/mip_core.dll
    • Size 5.2MB
    • SHA256 b91132b09bccc01df0d0a168691bb9e3720d7a5c0f69f1fd838ea6f87cceab0d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/mip_core_gn.dll
    • Size 8.2MB
    • SHA256 c5773cce04a65363895b2e209ead53cbede4871396d5af187c9dd29ef9323185
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/mip_protection_sdk.dll
    • Size 2.4MB
    • SHA256 3e46c961339de0359adc33e27aeaba932fb609304bc764aa0fa49b7d11dcfd78
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/msedge_elf.dll
    • Size 4.6MB
    • SHA256 20150099f08f29714d52137f6d2b9e9799bc031c4f7228912772643d2e634bc3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/mspdf.dll
    • Size 18.4MB
    • SHA256 52c9c7b146d5d747e113b4b35cb4c703162f2d985ea242ec4291db54f7377bf5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/msvcp140.dll
    • Size 550KB
    • SHA256 f23ec08cd51a0377de3d5e15265f28696e3602270df6f9057ace13a26d9a48bc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/msvcp140_codecvt_ids.dll
    • Size 40KB
    • SHA256 3ad45d2800f13e5bedeb1e0fddfcd40c392622bb8649c4321992d097941518de
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/oneauth.dll
    • Size 5.7MB
    • SHA256 adf8a824a06c62fe92efb03ea07423e182609017f44e6a1ecc965a63e4513bd9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/oneds.dll
    • Size 3.2MB
    • SHA256 af48988967bae769f3031f0d9fabc5ff7bdda72e8224050190a16988de21e611
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/onnxruntime.dll
    • Size 3.1MB
    • SHA256 1f11ded7a52be5994c8944ce4bd44d82e0a63c955688aa8e727cf22a9c65a42e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/onramp.dll
    • Size 457KB
    • SHA256 eec93ba0b1117a912873f7bfc14d3036fa29f271d165c32a5bea95c3de771e07
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/optimization_guide_internal.dll
    • Size 17.7MB
    • SHA256 608239e89a43fc482cbdd283c42069671478534c0fded508d780dac603ac1611
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/telclient.dll
    • Size 3.8MB
    • SHA256 1c7ed563eb7a9385f2d6cbd4330ab9ec6cd9afac4dd8b6699408dce9f6686ac2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/vccorlib140.dll
    • Size 352KB
    • SHA256 d30739d16049c3c9fc4fa2ba81321c19c5348c3141ca9b633f64fffe9a8b3d83
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Pro/vcruntime140.dll
    • Size 130KB
    • SHA256 dc23dd3073c98bb60f7e4843d09343652bbddffacd804c3d2349517c40f853db
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
5/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

c37d044b586085cb988ca031078a0863discoveryvidarstealer
Score
10/10

behavioral4

c37d044b586085cb988ca031078a0863discoveryvidarstealer
Score
10/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10