General

  • Target

    be2346fa2bef1b558f011862043e37bf5cef8b2290202a64a450a08750820462.zip

  • Size

    223KB

  • Sample

    240402-msnxlsfe8t

  • MD5

    271c93fece472de217606c06509d7442

  • SHA1

    71fe977eb42012e42715485f9a5bacc93042c761

  • SHA256

    3522803a75f9c7c5727032e70985cb07762ec832fbedf38926c5a3ae59d7d092

  • SHA512

    a2ed6db2004bd030f393ea622b953cf67d7965104b47702d23ceb407023d00716163c046232eed6a656f03ebbd9236278ca653fadb29ff17c919bb3372bb0427

  • SSDEEP

    6144:WD/PXY63o4jx+TPynZhfr8N7hquON6ab/+KOOEcN6/59MwQNZj:AKmx+TPaQlLONr/+K/Ek259ziN

Score
10/10

Malware Config

Extracted

Family

vidar

C2

https://steamcommunity.com/profiles/76561199658817715

https://t.me/sa9ok

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Targets

    • Target

      be2346fa2bef1b558f011862043e37bf5cef8b2290202a64a450a08750820462.exe

    • Size

      234KB

    • MD5

      7c665575a095a3d95e8fd3db9f68dbda

    • SHA1

      9702fa88095963c1d336cd48bca362a2b33a530e

    • SHA256

      be2346fa2bef1b558f011862043e37bf5cef8b2290202a64a450a08750820462

    • SHA512

      2d300feb63df4a08d5ff5e235cc2f6e2f293e3a19a012ee75a933e6992c09e6fb2964fcf5f7fd3443c7fff7a66291bfa4bb1acbc0d9bb9fdd1e36c266a59736f

    • SSDEEP

      6144:TaYIfJebpHDjRu5Wh//MdHavp1RyPaBWuWR0PIDqmvYWx:3I+5EEwCpePae68Ws

    Score
    10/10
    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks