General

  • Target

    58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff.zip

  • Size

    223KB

  • Sample

    240402-msmpjsfe7w

  • MD5

    aa8c5d78d28555f0ccc8087a51d3cfed

  • SHA1

    6aa302da2328217ca5b29600ce24549857f06807

  • SHA256

    5841ed19ed8fde6ba94f5ceb1052dd2e9145ee8486c4b67d535136bd52f7af95

  • SHA512

    24fe516c3c913d28d60efe66e961d80999827b6200620f175307bdb7d5aba21c39b25045f311f52c2da87283abdbe99d73cfd4ae5ef4add899cff07670b73207

  • SSDEEP

    6144:/HoiMPFaAGkIq2QgPnr/EaJO9aQaZcQf5:gi5ZvpPnzJOkQaZFh

Score
10/10

Malware Config

Extracted

Family

vidar

C2

https://steamcommunity.com/profiles/76561199658817715

https://t.me/sa9ok

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Targets

    • Target

      58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff.exe

    • Size

      234KB

    • MD5

      d0492d61a010c75b69a21b31761ac655

    • SHA1

      0168759aebd253fed1dd89a44d260f6eadc94a2d

    • SHA256

      58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff

    • SHA512

      e4552a5bcf7f6b7911a87873d6d168d44f4ab0f351c822b5ec3b14b5db359ce0fadecac7bc032111197243b79047cbe1203e4fa9afc558c9f9e2a0ecb28eb52d

    • SSDEEP

      6144:AhAZ0mc86LHVUCAlfzHORKOrfIrIEgcNxHookuvxNimwE5R:ImcJLHVpAl7o3rfwrYt+7/r

    Score
    10/10
    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks