Overview

overview

10

Static

static

3

winprofile

windows7-x64

3

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    194234e48c362f1bf3be6d02c5b380bfc900a2cf7911a1fc658a5a2ec0d0164f
  • Size 4.6MB
  • Sample240401-ffbcesdh3v
  • SHA256 194234e48c362f1bf3be6d02c5b380bfc900a2cf7911a1fc658a5a2ec0d0164f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
vidar22d12fb91f01647fe2107fec81f0cc22stealer

Malware Config

Extracted

Family

  • vidar

Version

  • 8.6

Botnet

  • 22d12fb91f01647fe2107fec81f0cc22

C2

  • https://steamcommunity.com/profiles/76561199658817715

  • https://t.me/sa9ok

Attributes
  • profile_id_v2

    22d12fb91f01647fe2107fec81f0cc22

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Targets

    • Target
      194234e48c362f1bf3be6d02c5b380bfc900a2cf7911a1fc658a5a2ec0d0164f
    • Size 4.6MB
    • SHA256 194234e48c362f1bf3be6d02c5b380bfc900a2cf7911a1fc658a5a2ec0d0164f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    vidar22d12fb91f01647fe2107fec81f0cc22stealer

    • Detect Vidar Stealer

      stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

      stealervidar

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks