>samit_hota
Back to IOCs
G011550 indicators

Vidar — Indicators of Compromise

Samit Hota·
#ioc#vidar

Overview

Indicators of compromise associated with Vidar. 50 indicators listed below, linked to the G0115 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
urlhttps://kayhector.com/July 19, 202675%
md5_hashf86db3e1c8635ecc820ef308302524bcJuly 18, 202695%
sha256_hash555fd5790046add4e994dfe655efe0ced7b31b73849793bd81bcff983f022013July 18, 202695%
sha1_hash0a07b70b37919c01cfddd5e4b4260b144e138ac5July 18, 202695%
md5_hash906010fce0c7b37b29ee13a78b6e130fJuly 18, 202695%
sha256_hashb473b09292b0e9ed4d4089344f77a12465242cf69db10768c93ba6cd40cfe770July 18, 202695%
sha1_hash90657841d1dab058acc5292711047d2999b05df5July 18, 202695%
domainauth-id-browser.infoJuly 18, 2026100%
urlhttps://targe.in/July 18, 202675%
urlhttps://pressurewashingsacramento.net/July 18, 202675%
domainsei.ambiltogel.netJuly 17, 2026100%
urlhttps://sei.ambiltogel.net/July 17, 2026100%
sha256_hash7073018596b174f584299d5152cf90f89a1f4e3bf072b778fc3342fda5c82f4fJuly 17, 202695%
sha1_hash915456ad1037056f7b542db11a97011da74d710fJuly 17, 202695%
md5_hashc45f291fda8740a843202a77180a15a1July 17, 202695%
sha1_hashf6d6bf43990bde77af73d24f237c86889adacbfdJuly 17, 202695%
md5_hash240861bb6ee7723f0a7449ec501c466bJuly 17, 202695%
sha1_hash3ec44d141f4d08ada015759eb2c5c79d76b53c54July 17, 202695%
md5_hashcf4866e9f6c60a4b253de4bb85f4da90July 17, 202695%
sha256_hash8ca5069041a3de3536f0be3b8f1b9044a0dfffd0295d7495cbd57d6a312af0b5July 17, 202695%
sha256_hash06ba715b44892af143c4336c189c28b5d95f446d3d07ca7ce7a6ab2a0601168bJuly 17, 202695%
sha1_hash904eed155444a8ba021d2f6b1c1bb6c89cb739e7July 17, 202695%
md5_hash0a9a59c9e53e6d9f218fc6c307016b44July 17, 202695%
sha256_hash2fdcac512cef51c5b0d8a4fb23c278b973d20978aab5d463abbe131dd04879a0July 17, 202695%
md5_hash7514a13877ee29b842859862663a03edJuly 17, 202695%
sha256_hashc13be88a14d2c50b4e5ebca6b490fd6b8a6982555051c58b1d45fef6011671eeJuly 17, 202695%
sha1_hash3dd7b3bbb0dcfe89e1a3ff1c1b0abcd5371b706eJuly 17, 202695%
md5_hash057739a12fa0d25a1017e5f7a8538140July 17, 202695%
sha256_hash8d5025b2ab7917dc3283738d91634a741d1bc3e03196d2855a1fd81fd9d80381July 17, 202695%
sha1_hash7df07eb1b7ba163c1a97b2120f15fdfb4bbc0cd6July 17, 202695%
urlhttps://battagliadipavia1525.it/July 17, 202675%
urlhttps://okx.kliksm188.top/July 17, 2026100%
domainokx.kliksm188.topJuly 17, 2026100%
urlhttps://okx.ambiltogel.net/July 17, 2026100%
domainokx.ambiltogel.netJuly 17, 2026100%
urlhttps://d11.kliksm188.top/July 17, 2026100%
urlhttps://d11.ambiltogel.net/July 17, 2026100%
domaind11.kliksm188.topJuly 17, 2026100%
domaind11.ambiltogel.netJuly 17, 2026100%
urlhttps://bfg.kliksm188.top/July 17, 2026100%
domainbfg.kliksm188.topJuly 17, 2026100%
domainbfg.ambiltogel.netJuly 17, 2026100%
urlhttps://bfg.ambiltogel.net/July 17, 2026100%
urlhttps://ffz.kliksm188.top/July 16, 202675%
domainffz.kliksm188.topJuly 16, 202675%
urlhttps://ffz.ambiltogel.net/July 16, 2026100%
domainffz.ambiltogel.netJuly 16, 2026100%
domaincra.kliksm188.topJuly 16, 202675%
urlhttps://cra.kliksm188.top/July 16, 202675%
urlhttps://cra.ambiltogel.net/July 16, 2026100%

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call