Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
Vidar Infostealer Malware Returns with new TTPS – Detection & Response
Threat Actors
Malware Families
Excerpt
Vidar is a type of malware that belongs to the category of information stealers. It is designed to infect Windows-based systems and is known for its ability to steal sensitive information such as passwords, credit card numbers, and other personal data. Vidar malware can also capture screenshots, record keystrokes, and log browser activity, among other things. One of the ways that Vidar malware is distributed is through spam emails or malicious websites. Once a user clicks on…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(3)
Capability(1)
Victim
Attack Flow8 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 176.113.115.17 | High | Score 64/100 | First seen |
| IP | 149.154.167.99 | High | Score 69/100 | First seen |
| IP | 78.46.254.12 | High | Score 58/100 | First seen |
| SHA256 | a311b8137f8f47beb0c1cd3a79b97015b7d6a96074c165699ef1e2207d074556 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…