IOC du rapport source : https://www.zscaler.com/blogs/security-research/vidar-adds-virtual-machine-and-custom-stream-ciphers-string-obfuscation
Affichage neutralisé. Un observable associé n'est pas une preuve de compromission ni une consigne de blocage.
md5	03f13619a413dd1bd7ff8dd47687b3e9	active
md5	16addb6524e5cf76f4114b0979f715ff	active
md5	a2535f051c329131c107d14651ace793	active
sha1	37ee3afa9df9c7d65b780cf54e908a98b92c4a5b	active
sha1	91c3431e51158aa800a452222a2404d7b82631ea	active
sha1	eb2a38a90d20475b00bdc285b89eb50eefd0b88e	active
sha256	1628bb03db87f67661349e169d73ee14ed490bdbf22abfbda08ccc9ebe237974	active
sha256	2d43d592630ad1e012da63ef7279f95dd4a8e94964e12ca2f996051875574fa6	active
sha256	625a381981fc2d4c25c981d98b1d66bb2cf5da2dde2f590add0673a857d5b074	active
sha256	979048a749d8f28d877c7068b1b336ecd1e349869dfb1d7c68118f90e4099bc4	active