General

  • Target

    58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff.zip

  • Size

    223KB

  • Sample

    240402-qgndgsbc36

  • MD5

    a1bf1725b27ab6482cebaea6fc11dd43

  • SHA1

    f8c0c24b6a25901f5d17f235d3cbedc1a018ced3

  • SHA256

    49c792def342179b4dc99d3736d5eeacbeaf9d2753b68165391f4f63fe888148

  • SHA512

    4a5e7f609585a4e34d0bceeb7446c47ca2c64e5d1837e1c2eb6abe8defe5f7ff7d49411357abd603e1ae3908baaf86a60b426a4fed7c2236825cb08ab9d9db63

  • SSDEEP

    3072:mPzdeQlYY/R9SsvuZRQD5qGw0qGMMOQ1EMs/7CVcyLSgvaB17NSKFpTPvu1X4f:afYY/RMguZR8Auu/7MFFa77cKXTPQQ

Score
10/10

Malware Config

Extracted

Family

vidar

C2

https://steamcommunity.com/profiles/76561199658817715

https://t.me/sa9ok

Attributes
  • user_agent

    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Targets

    • Target

      58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff.exe

    • Size

      234KB

    • MD5

      d0492d61a010c75b69a21b31761ac655

    • SHA1

      0168759aebd253fed1dd89a44d260f6eadc94a2d

    • SHA256

      58c48e2b1d3d26ac96cebf8c114750582d4cdeef46a05bbf706c4b4630c541ff

    • SHA512

      e4552a5bcf7f6b7911a87873d6d168d44f4ab0f351c822b5ec3b14b5db359ce0fadecac7bc032111197243b79047cbe1203e4fa9afc558c9f9e2a0ecb28eb52d

    • SSDEEP

      6144:AhAZ0mc86LHVUCAlfzHORKOrfIrIEgcNxHookuvxNimwE5R:ImcJLHVpAl7o3rfwrYt+7/r

    Score
    10/10
    • Detect Vidar Stealer

    • Vidar

      Vidar is an infostealer based on Arkei stealer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks