General

  • Target
    75180fd965656b7048588cd12af109fad8fb20e0c3d7290484b6013a403ed2ed.zip
  • Size 236KB
  • Sample240402-msm1bafe7y
  • SHA256 5828e69a8e8467abfe398af3e655710905c4ed08c1d5f1418cc1a83c9500c989
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • vidar

Version
  • 8.6

Botnet
  • debff3f4f38e9beeaf8e215a762c8549

C2
  • https://steamcommunity.com/profiles/76561199658817715

  • https://t.me/sa9ok

Attributes
  • profile_id_v2

    debff3f4f38e9beeaf8e215a762c8549

  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Targets

    • Target
      75180fd965656b7048588cd12af109fad8fb20e0c3d7290484b6013a403ed2ed.exe
    • Size 272KB
    • SHA256 75180fd965656b7048588cd12af109fad8fb20e0c3d7290484b6013a403ed2ed
    • MD5 SHA1 SHA512 SSDEEP
    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks