Overview

overview

10

Static

static

1

FlStudio20.9.2.exe

windows7-x64

10

FlStudio20.9.2.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FlStudio20.9.2.exe

  • Size

    761.7MB

  • Sample

    230212-pqbklsdh76

  • MD5

    546b8f444b7101f1dab3b2f488365242

  • SHA1

    3dbf439f71620542e18b8419d276d2bcf30be813

  • SHA256

    5f97ff745681161b416dce314999bcb38617ef2ac5edc52f5c78814f84bbdd21

  • SHA512

    84f46f8c050ab5b1956f46e5c9b24084ce4bfff4f7d470227eac000093b9e773301c088c7f8ef9c662d05dbaeafe0c6451fb30307ffd660aaf90892733e42bbb

  • SSDEEP

    12288:YXfBB/ocZiIY9RKsnlYqLbvv5z2BywLKQ7XID20I:mB/ocZiIFqLb38VLKC6ZI

Score
10/10
vidar408stealer

Malware Config

Extracted

Family

vidar

Version

2.4

Botnet

408

Attributes
  • profile_id

    408

Targets

    • Target

      FlStudio20.9.2.exe

    • Size

      761.7MB

    • MD5

      546b8f444b7101f1dab3b2f488365242

    • SHA1

      3dbf439f71620542e18b8419d276d2bcf30be813

    • SHA256

      5f97ff745681161b416dce314999bcb38617ef2ac5edc52f5c78814f84bbdd21

    • SHA512

      84f46f8c050ab5b1956f46e5c9b24084ce4bfff4f7d470227eac000093b9e773301c088c7f8ef9c662d05dbaeafe0c6451fb30307ffd660aaf90892733e42bbb

    • SSDEEP

      12288:YXfBB/ocZiIY9RKsnlYqLbvv5z2BywLKQ7XID20I:mB/ocZiIFqLb38VLKC6ZI

    Score
    10/10
    vidar408stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks