Overview

overview

10

Static

static

1

URLScan

urlscan

https://www.youtube....

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbHRYaFRHVklGeXZYbnNMamZjNzlycDdsQkV6d3xBQ3Jtc0tsaF9zZUJUOUtoYkd4Y19nRFRoQVkyYmQ1dmd6V1VyVGRyd19VX1BzdUNqV3ZfcUEyNFJnSVFqdFNlV2tQdkFBN0N0UHVyZnFxeURNbE9ZVi15V05vRHRFZlE4WnJKOG1TRVNZXzdFbmVKMXRKV0pnRQ&q=https%3A%2F%2Fibf.tw%2FoC6bs&v=u6bEsLsEk90

  • Sample

    230330-glht5abb39

Score
10/10
vidar5486a916d26a1354ec22e5bc436bbf98stealer

Malware Config

Extracted

Family

vidar

Version

3.1

Botnet

5486a916d26a1354ec22e5bc436bbf98

C2

https://steamcommunity.com/profiles/76561199472266392

https://t.me/tabootalks

http://135.181.26.183:80
Attributes
  • profile_id_v2

    5486a916d26a1354ec22e5bc436bbf98

  • user_agent

    Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 OPR/91.0.4516.79

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbHRYaFRHVklGeXZYbnNMamZjNzlycDdsQkV6d3xBQ3Jtc0tsaF9zZUJUOUtoYkd4Y19nRFRoQVkyYmQ1dmd6V1VyVGRyd19VX1BzdUNqV3ZfcUEyNFJnSVFqdFNlV2tQdkFBN0N0UHVyZnFxeURNbE9ZVi15V05vRHRFZlE4WnJKOG1TRVNZXzdFbmVKMXRKV0pnRQ&q=https%3A%2F%2Fibf.tw%2FoC6bs&v=u6bEsLsEk90

    Score
    10/10
    vidar5486a916d26a1354ec22e5bc436bbf98stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks