Overview

overview

10

Static

static

1

Route Maps.exe

windows7-x64

10

Route Maps.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Route Maps.zip
  • Size 1.2MB
  • Sample230605-wgaehsaa32
  • SHA256 6cefcdfd1df7b64b7312d9d2d418a7f0e61c6b952c7f653d12db7e05a20089fd
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
vidar875stealer

Malware Config

Extracted

Family

  • vidar

Version

  • 2.2

Botnet

  • 875

C2

  • https://t.me/litlebey

  • https://steamcommunity.com/profiles/76561199472399815

  • http://157.90.148.112:80

Attributes
  • profile_id

    875

Targets

    • Target
      Route Maps.malz
    • Size 739.0MB
    • SHA256 84bfaeb9b8dd2dc8b5828c44d9fe482892148911784f7ba04731fca73b7d7b93
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    vidar875stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks